Medidata Solutions Trust Center

Trust center

Medidata Solutions maintains a public trust center documenting SOC 2+ Type II, ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, ISO 27701:2019, CSA STAR Registry (CAIQ), HIPAA, FISMA ATO, FedRAMP ATO (NHLBI), GDPR, 21 CFR Part 11, ICH-GCP, EU GMP Annex 11, and NIST AI Risk Management Framework compliance.

CompanyHealthcareClinical TrialsLife SciencesElectronic Data CaptureEDCPharmaCDISC ODMClinical Data ManagementDassault Systemes

Trust center: https://www.medidata.com/en/trust-and-transparency/

Certifications & Compliance

SOC 2+ Type IIISO 27001:2022ISO 27017:2015ISO 27018:2019ISO 27701:2019CSA STAR Registry (CAIQ)HIPAAFISMA ATOFedRAMP ATO (NHLBI)GDPR21 CFR Part 11ICH-GCPEU GMP Annex 11NIST AI Risk Management Framework

Source

Trust Center

generated: '2026-07-20'
method: searched
probe: true
url: https://www.medidata.com/en/trust-and-transparency/
certifications:
- SOC 2+ Type II
- ISO 27001:2022
- ISO 27017:2015
- ISO 27018:2019
- ISO 27701:2019
- CSA STAR Registry (CAIQ)
- HIPAA
- FISMA ATO
- FedRAMP ATO (NHLBI)
- GDPR
- 21 CFR Part 11
- ICH-GCP
- EU GMP Annex 11
- NIST AI Risk Management Framework
resources:
- name: Information Security Whitepaper
  url: https://assetlibrary.medidata.com/m/2324d759405897c6/original/Security-Whitepaper-8-19-22.pdf
- name: Penetration Test Results / Vulnerability Scan Summaries (login)
  url: https://learn.medidata.com
evidence:
- source: https://www.medidata.com/en/trust-and-transparency/
  keywords: [soc 2, iso 27001, iso 27701, hipaa, fedramp, trust and transparency, csa star]
note: >-
  Medidata (a Dassault Systemes company) publishes its compliance posture on the
  Trust & Transparency page. Detailed certificates and audit reports are provided
  to customers via iMedidata (learn.medidata.com, login required).