[Webinar] Master Apache Kafka Fundamentals with Confluent | Register Here
The foundation of every successful customer relationship is trust. At Confluent, we understand that for our customers and prospects to innovate with confidence, they must have complete trust in the security and integrity of our platform. Our commitment goes beyond simply providing a secure product. It’s about empowering our customers with the tools and transparency they need to feel confident in their data streaming architectures. This commitment is the driving force behind the Confluent Trust Center.
The Confluent Trust Center is a dedicated portal that provides customers with direct, on-demand access to our security, privacy, and compliance documentation. It’s a one-stop shop that empowers you to conduct your own due diligence at your convenience.
The Confluent Trust Center translates Confluent’s trust principles into actionable features and resources, demonstrating our commitment to customer enablement and security.
Our Trust Center isn't just a repository of files; it’s a strategic asset designed to accelerate your business and simplify your compliance burden.
Here’s how our documentation adds tangible value at every stage of your journey with us.
The security review is often the longest stage of the procurement cycle. We’ve designed our Trust Center to act as a self-service accelerator, helping you move from evaluation to implementation faster than ever.
Instant Due Diligence: Seamlessly access up-to-date compliance documents, including System and Organization Control 2 (SOC 2) reports as well as International Organization for Standardization (ISO) and other industry certifications (such as Health Information Trust Alliance [HITRUST], Information Security Registered Assessors Program [IRAP], and Cyber Essentials + for regional compliance needs), streamlining your security assessments and accelerating business deals.
Standardized Security Assessment: Our Consensus Assessments Initiative Questionnaire (CAIQ), and Standardized Information Gathering (SIG) questionnaires provide pre-vetted answers to more than 1,000+ standard security questions, allowing your team to complete your vendor assessment in minutes.
Clear Boundaries: Our Confluent Cloud Security and Compliance Shared Responsibility Model white paper eliminates ambiguity about security responsibilities. It tells your architects exactly what Confluent handles and what your team needs to configure, ensuring a secure design from day one.
Security doesn't end when the contract is signed. For our existing customers, the Trust Center serves as a partner in continuous assurance, making your annual audit cycles significantly less painful.
Proactive Audit Readiness: Subscribe to our Trust Center to receive notifications when a new SOC report or penetration test summary is published.
Evidence Mapping: Your team can map our third-party attestations—such as SOC 2, ISO 27001, HITRUST, and TruSight (KY3P)—directly to your internal control frameworks, reducing the "evidence gap" and allowing your auditors to complete their reviews in a fraction of the time.
Adapting to a Shifting Global Regulatory Landscape: As global mandates evolve—ranging from privacy laws such as the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) to industry-specific requirements such as the Digital Operational Resilience Act (DORA) for finance and Federal Risk and Authorization Management Program (FedRAMP) for government—our Trust Center documentation and attestations scale with your needs, providing the assurance required to navigate multijurisdictional complexity.
Operational Transparency: Use our vulnerability management, penetration testing, business continuity/disaster recovery plan, and audit logging documentation to align Confluent’s security telemetry with your own operational controls, ensuring a unified defense across your data-in-motion ecosystem.
We understand that navigating security documentation and compliance frameworks can be time-consuming when you’re looking for specific answers. To better support our customers and prospects, we’re excited to announce the launch of Ask AI, which enables self-serve convenience in the Confluent Trust Center.
If you have a Trust Center account, you can now use this intelligent assistant to get immediate, accurate answers regarding our security posture. Ask AI is trained on our latest security and compliance documentation, allowing you to simplify complex queries. Ask a question and receive a concise summary of our security posture and compliance framework.
Whether you’re a long-time customer or currently evaluating our platform, this tool is designed to provide the technical assurance you need, exactly when you need it.
We believe in an open-door approach to our security practices. The Trust Center is designed to be a key resource for your security, compliance, and legal teams, providing the evidence and documentation necessary to streamline your own audits and due diligence processes.
We take responsibility for the security of our platform and your data. The Trust Center is a living resource, continuously updated with our latest security practices, product enhancements, and public commitments. Our dedicated security and compliance teams work tirelessly to not only meet but exceed industry standards, and the Trust Center serves as a testament to that ongoing effort.
By making the Confluent Trust Center an integral part of your security workflow, you can build a more secure foundation and strengthen the trust between our organizations.
We’re proud to stand for trust in a world that demands it more than ever. The Confluent Trust Center is our pledge to our customers—a promise of transparency, a tool for empowerment, and a beacon of our unwavering commitment to your security.
To get the most out of our Trust Center, we encourage you to:
Bookmark the page: Make the Trust Center your first stop for any Confluent security or compliance-related inquiries.
Create a profile: Sign up for an account to access a wider range of detailed, non-public documents.
Subscribe to announcements: Users with account profiles can also subscribe to receive emails when Confluent publishes updates about new reports, certifications, and white papers.
Share with your teams: Direct your security, legal, and compliance teams to the Trust Center to streamline their due diligence processes.
We invite you to explore the Confluent Trust Center today and see our commitment to security and transparency in action. Discover the resources that can empower your teams, streamline your compliance efforts, and solidify your confidence in Confluent as your trusted partner.
Unified Stream Manager is now GA! Bridge the gap between Confluent Platform and Confluent Cloud with a single pane of glass for hybrid data governance, end-to-end lineage, and observability.
Confluent Private Cloud (CPC) is a new software package that extends Confluent’s cloud-native innovations to your private infrastructure. CPC offers an enhanced broker with up to 10x higher throughput and a new Gateway that provides network isolation and central policy enforcement without client...