Skip to main content

Cloud Computing Compliance Criteria Catalog (C5)

This page describes Cloud Computing Compliance Criteria Catalog (C5) compliance controls in Databricks.

C5 overview

C5 is a German Federal Office for Information Security (BSI) standard that defines minimum security requirements for cloud service providers. Organizations often use a C5 attestation to demonstrate the design and operating effectiveness of cloud security controls.

Key points

  • Developed and maintained by the German BSI.
  • Focuses on transparency and baseline security controls for cloud services.
  • Complements frameworks such as ISO/IEC 27001 and SOC 2.

Enable C5 compliance controls

To configure your workspace to support processing of data regulated by the C5 standard, the workspace must have the compliance security profile enabled. Only specific preview features are supported for processing regulated data. For details on the compliance security profile, supported preview features, and supported regions, see Compliance security profile.

You are solely responsible for verifying that sensitive information is never entered in customer-defined input fields, such as workspace names, compute resource names, tags, job names, job run names, network names, credential names, storage account names, and Git repository IDs or URLs. These fields might be stored, processed, or accessed outside the compliance boundary.

To enable the compliance security profile, see Configure enhanced security and compliance settings.

Regional support for features

This table shows feature availability for the selected compliance standard across all supported Databricks regions. Some features may be listed as available before they are actually released.

Feature

ap-northeast-1

ap-northeast-2

ap-southeast-1

ap-southeast-2

ap-southeast-3

ap-south-1

ca-central-1

eu-central-1

eu-west-1

eu-west-2

eu-west-3

sa-east-1

us-east-1

us-east-2

us-west-1

us-west-2

AI Functions - Classification

AI Functions - Document Parsing

AI Functions - Information Extraction

Anomaly Detection

Classic Compute

Clean Rooms

Data Classification

Databricks Apps

Databricks One

Default Storage

Genie Agent Mode

Genie Code

Genie Code Agent Mode

Genie Code Dashboard Agent

Genie Spaces

Knowledge Assistant

Lakebase Autoscaling

Lakeflow Connect - Confluence

Lakeflow Connect - Dynamics 365

Lakeflow Connect - GA4

Lakeflow Connect - Google Ads

Lakeflow Connect - HubSpot

Lakeflow Connect - Meta Ads

Lakeflow Connect - MySQL

Lakeflow Connect - NetSuite

Lakeflow Connect - PostgreSQL

Lakeflow Connect - SFTP

Lakeflow Connect - Salesforce

Lakeflow Connect - ServiceNow

Lakeflow Connect - SharePoint

Lakeflow Connect - TikTok Ads

Lakeflow Connect - Workday HCM

Lakeflow Connect - Workday Reports (RaaS)

Lakeflow Connect - Zendesk Support

Lakeflow Connect - Zerobus Ingest

Lakeflow Jobs

Lakeflow Pipelines Editor

Lakehouse Monitoring

MLflow on Databricks

Managed MCP Servers

Model Serving - AI Gateway

Model Serving - AI Guardrail

Model Serving - AI Playground

Model Serving - Custom Models

Model Serving - External Models

Model Serving - Foundation Models AI Function (ai_query)

Model Serving - Foundation Models Pay-Per-Token

Predictive Optimization

Serverless Jobs/Workflows/Notebooks

Serverless Lakeflow Pipelines

Serverless SQL warehouses

Serverless Workspace

Supervisor Agent

Vector Search (Standard)

Vector Search (Storage Optimized)