Snapshot 192

Document
Trust center
URL
https://trust.clickhouse.com/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
468207 bytes
SHA-256 (raw)
333aa4c14adce410b0fc4a5f61510fdafad74cab6987202b0dffd5ae84efe724
SHA-256 (normalized text)
945a5a499e4a1602a51805da8deb0b3983374c9624fbdb431b0810a77a2e1423

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Trust center
Start your security review
View & download sensitive information
Ask for information
Overview
Welcome to ClickHouse's Trust center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust center to learn about our security posture and request access to our security documentation.
Compliance
CCPA
EU-US DPF
GDPR
HIPAA
ISO/IEC 27001
ISO/IEC 27001 SoA
PCI DSS
SOC 2 Type 2
ISO/IEC 27701
Documents
DOCUMENTSBYOC Component List
DOCUMENTSBYOC shared responsibility model
DOCUMENTSClickHouse 2025 Non Resident Tax Form
DOCUMENTSClickHouse W9
DOCUMENTSData processing locations
DOCUMENTSForm 10F
DOCUMENTSNo PE Form - India
DOCUMENTSSecurity cloud responsibility matrix
REPORTSHIPAA report
REPORTSPCI DSS - SAQ A
REPORTSPentest report
REPORTSVulnerability assessment report
Risk profile
Data access levelRestricted
Impact levelModerate
Critical dependenceYes
View more
Product security
Audit logging
Data security
Integrations
View more
Reports
PCI DSS - SAQ A
Pentest report
Vulnerability assessment report
View more
Data security
Access monitoring
Data erasure
Data Masking
View more
App security
Responsible disclosure
Bot detection
Secure development training
View more
AI
AI Compliance
Legal
Acceptable Use Policy
Modern Slavery & Human Trafficking Statement
ClickHouse Security Standards
View more
Data privacy
Cookies
Data breach notifications
Employee privacy training
View more
Access control
Data access
Logging
Password security
Infrastructure
Status monitoring
Amazon Web Services
Anti-DDoS
View more
Endpoint security
Disk encryption
Endpoint detection and response
Mobile device management
View more
Network security
IDS/IPS
Security information and event management
Virtual private cloud
Corporate security
Employee training
HR security
Incident Response
View more
Internal Policies
Data classification policy
Information security policy
Operations security policy
View more
Security Grades
Qualys SSL Labs
clickhouse.cloud
A+
BC/DR
Data backup/backup protection
High availability
Knowledge Base (FAQ)
Federal: Is there a ClickHouse version that is secured for US Federal compliance?
View more
Trust center Updates
ClickHouse Response to the Axios npm Supply Chain Compromise
Vulnerabilities
ClickHouse Cloud is not impacted by the recently disclosed supply chain attack against the Axios npm package (axios@1.14.1 and axios@0.30.4), in which a compromised maintainer account was used to publish backdoored versions containing a cross-platform remote access trojan (RAT). No action is required by our customers.
ClickHouse Response to React (CVE-2025-55182) and Next.js (CVE-2025-66478) vulnerabilities
Vulnerabilities
ClickHouse Cloud is not impacted by the recently published vulnerabilities affecting React (CVE-2025-55182) and Next.js (CVE-2025-66478). Our security team has completed a thorough investigation and confirmed that our platform does not utilize the specific React Server Components (RSC) configurations required for exploitation. No action is required by our customers.
ClickHouse Response to Shai-Hulud 2.0 Supply Chain Attacks
Vulnerabilities
ClickHouse is not affected by the Shai-Hulud 2.0 npm supply chain attack. Our security team has audited our software supply chain and confirmed that our products and infrastructure remain secure. We continue to monitor the situation to ensure ongoing protection for our customers.
If you think you may have discovered a vulnerability, please send us a note.
Report issue