Compliance frameworks, security audits, and quality certifications this company maintains.
Regulatory
FedRAMP Moderate
In ProgressVercel is pursuing FedRAMP Moderate authorization to enable US federal government customers to deploy applications on the Vercel platform, with security controls being implemented to meet NIST 800-53 requirements for federal cloud workloads.
Vercel complies with the California Consumer Privacy Act for personal data processed through its deployment platform and developer tools, providing California residents with rights over their personal data collected via Vercel services.
Vercel supports HIPAA-eligible workloads through its enterprise platform tier, allowing healthcare organizations to deploy applications on Vercel infrastructure with appropriate Business Associate Agreements and data handling controls.
Vercel maintains ISO 27018 certification for protection of personally identifiable information in public cloud environments, demonstrating its commitment to cloud privacy practices for customer data processed through the Vercel deployment platform.
Vercel participates in the Cloud Security Alliance STAR Level 2 program, providing customers with an independent third-party assessment of Vercel security controls aligned with the CSA Cloud Controls Matrix for cloud infrastructure transparency.
Vercel maintains SOC 2 Type II attestation for Security, Confidentiality, and Availability, audited annually by Schellman & Company.
Vercel is ISO 27001:2022 certified, demonstrating a rigorously audited Information Security Management System across its global platform.
Vercel holds both SAQ-D AOC for Service Providers and SAQ-A AOC for Merchants under PCI DSS v4.0, enabling customers to build payment flows on the platform.
Vercel achieved TISAX Assessment Level 2, meeting the automotive industry information security standard governed by the ENX Association.
Vercel is GDPR-compliant with a Data Processing Agreement available, zero-PII Analytics, and infrastructure options in EU regions for data residency.