-
ISO/IEC 27001 certification
-
Yes
-
ISO/IEC 27001 accredited by
-
Schellman & Company LLC
-
ISO/IEC 27001 accreditation date
-
Tuesday 26 November 2024
-
What the ISO/IEC 27001 doesn’t cover
-
The scope of the ISO/IEC 27001:2022 certification is limited to the information security management system (ISMS) supporting Pega Cloud Services, and includes the organizations, systems, and people directly involved in developing, deploying, maintaining, and monitoring Pega Cloud Services, in accordance with the statement of applicability, version 7.1, dated August 20, 2024, and aligned with control implementation guidance and additional control sets of ISO/IEC 27017:2015 and ISO/IEC 27018:2019. Pega Cloud Services includes Pega Software available via Pega Cloud Subscription and Pega Launchpad Subscription offerings hosted in Pega Cloud and consumed by clients, excluding Co-Browse.
-
ISO 28000:2022 certification
-
No
-
ISO 9001 certification
-
Yes
-
ISO 9001 certification accredited by
-
BSI
-
ISO 9001 accreditation date
-
Tuesday 20 January 2026
-
What the ISO 9001 doesn’t cover
-
N/A - Pega's ISO certification covers all elements of Pega Cloud, including Cloud Engineering, Cloud Operations, Cloud Security and Global Client Support. It also includes back office functional departments that support service delivery, such as Sales, Legal (contracts), and People Management.
-
Quality management systems (QMS)
-
Yes
-
CSA STAR certification
-
Yes
-
CSA STAR accreditation date
-
Tuesday 26 November 2024
-
CSA STAR certification level
-
Level 2: CSA STAR Attestation
-
What the CSA STAR doesn’t cover
-
The STAR certification is assessed along with and aligned to the scope of the ISO/IEC 27001:2022 certification for the information security management system (ISMS) supporting Pega Cloud Services, which includes the organizations, systems, and people directly involved in developing, deploying, maintaining, and monitoring Pega Cloud Services, in accordance with the statement of applicability, version 7.1, dated August 20, 2024, and aligned with control implementation guidance and additional control sets of ISO/IEC 27017:2015 and ISO/IEC 27018:2019. Pega Cloud Services includes Pega Software available via Pega Cloud Subscription offerings hosted in Pega Cloud and consumed by clients, excluding Co-Browse.
-
PCI certification
-
Yes
-
PCI DSS certification accredited by
-
Wolf and Company
-
PCI DSS accreditation date
-
Thursday 22 August 2024
-
What the PCI DSS doesn’t cover
-
Scope: Pega Cloud AWS & GCP
Not Covered: Specific exclusions detailed in the Shared Responsibility Matrix
-
Cyber essentials
-
Yes
-
Cyber Essentials Certificate Number
-
3e454509-6217-4475-8128-5f00b81c1e41
-
Cyber essentials plus
-
Yes
-
Cyber Essentials Plus Certificate Number
-
84c2eb2a-990e-42b6-925e-7bd4feffdc9f
-
Other security certifications
-
Yes
-
Any other security certifications
-
- ISO 22301 (Business Continuity)
- ISO 27017 (Cloud Security)
- ISO 27018 (Cloud Privacy)
- SOC 1
- SOC 2 Type 2
- HITRUST
- FedRamp
- IRAP
- TISAX
- C5 Type 1 & 2 (Cloud Computing Compliance Criteria Catalogue)