Snapshot 178862

Document
Trust center
URL
https://www.emqx.com/en/security-and-trust-center
Fetched
HTTP status
200
Content type
text/html;charset=utf-8
Fetch mode
static
Size
97266 bytes
SHA-256 (raw)
96019ddf73118d1782c32f0a84802acd1bcb05565923f008a29ca898d26d13f3
SHA-256 (normalized text)
7881cd441e057c7946ccd1915d872f58c23742d61bfeb38f6bd78da0069ffd6f

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Conference
Meet EMQ at SPS 2026: Real-Time Data for Industrial AI →
Security & Trust Center
Explore EMQ’s security controls, independent reports, and compliance information.
View certificationsReport a vulnerability
How we protect your data
Tenant isolation
Dedicated resources keep EMQX Cloud tenant data separate.
Authentication
EMQX Cloud supports username/password, JWT, and X.509 certificate authentication.
Role-based access
Control access by role, with comprehensive audit logs for all user and system activity.
Secure connections
TLS encrypts all connections. VPC peering and PrivateLink support private network access.
Certifications and compliance
TISAX
TISAX standardizes information security assessments and information exchange across supply chains, with broad use in the automotive industry. EMQ has achieved the VDA-TISAX Information Security High Level (AL2) certification.
SOC 1
SOC 1 reports assess service-organization controls relevant to customers’ financial reporting. Issued under AICPA attestation standards or ISAE 3402, they address system descriptions and control design; Type 2 reports also assess operating effectiveness.
SOC 2 Type 1
SOC 2 reports are regularly refreshed and assess controls relevant to security, availability, processing integrity, confidentiality, or privacy. EMQ currently offers SOC 2 Type 1 reports for EMQX Cloud and EMQX Enterprise.
SOC 2 Type 2
SOC 2 is an independent report assessing a service provider’s services and internal controls under the AICPA framework. EMQ’s SOC 2 compliance reflects controls to protect its systems and data.
ISO/IEC 27001:2022
EMQ adopts ISO/IEC 27001:2022 for information security management. The standard provides a systematic approach to confidentiality, integrity, and availability and supports regulatory and customer requirements.
ISO/IEC 27701:2019
ISO/IEC 27701:2019 extends ISO/IEC 27001 and ISO/IEC 27002 with guidance for handling personal information. EMQ’s adherence to this certification reflects its commitment to privacy and data protection.
ISO/IEC 20000-1:2018
EMQ adopts ISO/IEC 20000-1:2018 for IT service management. The standard sets requirements for establishing, implementing, maintaining, and continually improving service management systems.
ISO 9001:2015
EMQ adopts ISO 9001:2015 for quality management. The standard focuses on consistent products and services, continuous improvement, customer satisfaction, and meeting customer and regulatory requirements.
GDPR readiness
GDPR governs the use and protection of personal data from the European Economic Area (EEA). EMQ is committed to supporting customers’ GDPR compliance efforts.
HIPAA
HIPAA sets standards for protecting sensitive patient health information. EMQ can support HIPAA-related customer data only after a Business Associate Agreement (BAA) has been properly executed with EMQ.
Questions about security or compliance?
Talk to usReport a vulnerability