Skip to main content

Cloud Computing Compliance Criteria Catalog (C5)

This page describes Cloud Computing Compliance Criteria Catalog (C5) compliance controls in Databricks.

C5 overview​

C5 is a German Federal Office for Information Security (BSI) standard that defines minimum security requirements for cloud service providers. Organizations often use a C5 attestation to demonstrate the design and operating effectiveness of cloud security controls.

Key points​

  • Developed and maintained by the German BSI.
  • Focuses on transparency and baseline security controls for cloud services.
  • Complements frameworks such as ISO/IEC 27001 and SOC 2.

Enable C5 compliance controls​

To configure your workspace to support processing of data regulated by the C5 standard, the workspace must have the compliance security profile enabled. Only specific preview features are supported for processing regulated data. For details on the compliance security profile, supported preview features, and supported regions, see Compliance security profile.

To enable the compliance security profile, see Configure enhanced security and compliance settings.

Last updated on