# Information Security Compliance (SOC2, ISO27001, HIPAA, etc.)

**URL:** <https://community.make.com/t/information-security-compliance-soc2-iso27001-hipaa-etc/8052>\
**Category:** Questions\
**Created:** [February 13, 2023, 9:13am UTC](https://community.make.com/t/information-security-compliance-soc2-iso27001-hipaa-etc/8052 "2023-02-13T09:13:53Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![Michaela-Inactive](https://dub1.discourse-cdn.com/flex013/user_avatar/community.make.com/michaela-inactive/32/29_2.png) [@Michaela-Inactive](https://community.make.com/u/Michaela-Inactive)\
**Post date:** [February 13, 2023, 9:55am UTC](https://community.make.com/t/information-security-compliance-soc2-iso27001-hipaa-etc/8052/3 "2023-02-13T09:55:26Z")

</div>

Hello there @shanemoore welcome to the community 👋

And thanks a lot for the tag here @ManishMandot 🙏

⬇ Let me to provide an overview of Make’s security compliance for the benefit of other users as well.

* * *

From a contractual perspective, with the launch of Make ([www.make.com](http://www.make.com/)), the service is provided by Celonis, Inc. that also wholly owned Integromat since its acquisition in 2020.

Make has ISO 27001 certificate (you can find it [here](https://www.celonis.com/trust-center/)). At this time the team is concentrating on other certificates (such as SOC 2) and evaluating the customer’s demand for other certificates (including HIPAA).

Make also provides the [Data is confidential](https://www.make.com/en/help/scenarios/scenario-settings#2---data-is-confidential) option that, when selected, ensures that none of the data processed by a scenario is stored on our servers, and therefore cannot be displayed after the scenario executes.

The service is being provided based on the terms available on our new website:

- [Terms and conditions](https://www.make.com/en/terms-and-conditions)
- [Security and compliance at Make](https://www.make.com/en/security)

Here you can generate your own DPA:

- [Generate signed copy of our Data Processing Agreement](https://www.make.com/en/hq/gdpr-dpa)

Some important notes in this regard, adding to the terms you can find on the website:

- We have made an effort to make our terms a lot cleaner and more understandable.
- Furthermore, we have updated our Data Processing Agreement (DPA) to make sure all GDPR requirements are accurately reflected.
- For maximum transparency, a [list of sub-processors](https://www.make.com/sub-processors.pdf) and [technical & organizational measures](https://www.make.com/technical-and-organizational-measures.pdf) have been published under the provided links.

**Make’s first priority is protecting your data.**

The Make platform:

- Uses encryption at all times.
- Offers you certified secure (SOC 2 certification) hosting on AWS in the location of your choice (US/North Virginia or EU/Dublin).
- Backs up data regularly.
- Ensures maximum application and infrastructure security by regular third party security assessments.
- Scans for production infrastructure vulnerability.
- Features Static Application Security Testing (SAST).
- Introduces a bug bounty program.
- Provides differentiated levels of security features that will ensure your security requirements are met. For example: our highest plan, Enterprise plan, provides even the largest of companies with everything required to meet any internal or external regulatory security requirements. Learn more about Security in the Enterprise plan.

For further information, please [contact our customer support team](https://www.make.com/en/ticket?_gl=1*i5jkqa*_ga*Mjg4NTQ4MjU1LjE2OTk1OTcxOTY.*_ga_MY0CJTCDSF*MTcxNTIzNjk1NC4yNjMuMS4xNzE1MjUzNDE2LjYwLjAuMA..) and select ‘Data Privacy/Security’ in the contact form.

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/b/7/b755aab0e0de799fc2b13d9ce4304408ac765f6b.jpeg)

---

_[View the full topic](https://community.make.com/t/information-security-compliance-soc2-iso27001-hipaa-etc/8052)._