Workflows regularly undergoes independent verification of its
security, privacy, and compliance controls, achieving certifications,
attestations, and audit reports to demonstrate compliance.

Your compliance responsibility when using Workflows is determined
by the sensitivity of your data, your organization's compliance objectives, and
applicable laws and regulations.

Workflows is compliant with the following certifications and standards.
This does not include any feature in [Preview](https://cloud.google.com/products#product-launch-stages).

|---|---|
| ✔ | [C5:2020](https://docs.cloud.google.com/security/compliance/bsi-c5) |
| ✔ | [FedRAMP High](https://docs.cloud.google.com/security/compliance/fedramp) |
| ✔ | [HIPAA](https://docs.cloud.google.com/security/compliance/hipaa) |
| ✔ | [HITRUST CSF](https://docs.cloud.google.com/security/compliance/hitrust) |
| ✔ | [ISO 27001](https://docs.cloud.google.com/security/compliance/iso-27001) |
| ✔ | [ISO 27017](https://docs.cloud.google.com/security/compliance/iso-27017) |
| ✔ | [ISO 27018](https://docs.cloud.google.com/security/compliance/iso-27018) |
| ✔ | [PCI DSS](https://docs.cloud.google.com/security/compliance/pci-dss) |
| ✔ | [SOC 1](https://docs.cloud.google.com/security/compliance/soc-1) |
| ✔ | [SOC 2](https://docs.cloud.google.com/security/compliance/soc-2) |
| ✔ | [SOC 3](https://docs.cloud.google.com/security/compliance/soc-3) |

For more information, see the
[Compliance resource center](https://docs.cloud.google.com/security/compliance).