Press release

Announcing SOC 2 Type 2 and CSA Star Level 2 Attestation across Elastic Cloud

Sponsored by Businesswire

Elastic N.V. (NYSE: ESTC), the company behind Elasticsearch and the
Elastic Stack, is happy to announce a milestone with the achievement of
SOC 2 Type 2 and CSA Star Level 2 Attestation for Elasticsearch Service,
Elastic Site Search Service, and Elastic App Search Service. These
certifications are available starting today and apply to current
customer workloads automatically.

SOC 2 Type 2

The Service and Organization Control or “SOC” 2 Report assesses an
organization’s controls against the AICPA’s
Trust Services criteria
. The SOC 2 Type 2 Report focuses on
management’s description of a service organization’s system and the
suitability of the design and operating effectiveness of controls.

Elastic has completed its SOC 2 Type 2 Certification for Elasticsearch
Service, Support Services, App Search Service, and Site Search Service
on the following Trust Services Criteria:

  • Security
  • Confidentiality
  • Availability

A link to Elastic’s SOC 2 Type 2 Management Representation Letter can be
found here.

CSA STAR Level 2 Attestation

Elastic has completed the CSA STAR Level 2 Attestation for its
Elasticsearch Service, Site Search Service, and App Search Service.

The Cloud Security Alliance Security Trust Assurance and Risk (CSA STAR)
Program encompasses key principles of transparency, rigorous auditing,
and harmonization of standards.

The Level 2 CSA STAR Attestation is a collaboration between CSA and the
AICPA to provide guidelines for certified public accountants (CPAs) to
conduct SOC 2 engagements using criteria from the AICPA (Trust Services
Principles, AT 101) and the CSA Cloud
Controls Matrix
. The Level 2 CSA STAR Attestation provides for
third-party independent assessments of cloud providers.

About Elastic

Elastic is a search company. As the creators of the Elastic Stack
(Elasticsearch, Kibana, Beats, and Logstash), Elastic builds
self-managed and SaaS offerings that make data usable in real time and
at scale for use cases like application search, site search, enterprise
search, logging, APM, metrics, security, business analytics, and many

Elastic and associated marks are trademarks or registered
trademarks of Elastic N.V. and its subsidiaries. All other company and
product names may be trademarks of their respective owners.