Commvault Systems, Inc. is an American publicly traded cybersecurity and data protection software company.
Summary from Wikipedia.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
EU-US DPF
Publicly advertised on the organization’s trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
ISO 27001
International standard for an information security management system, certified by accredited bodies.
-
FedRAMP
Publicly advertised on the organization’s trust center.
-
PCI DSS
Payment card industry standard for handling cardholder data securely.
-
HIPAA
Public claim of compliance with US health-data privacy and security rules. HIPAA has no certification; compliance is self-attested.
-
CSA STAR
Publicly advertised on the organization’s trust center.
-
TX-RAMP
Texas state authorization program for cloud products used by state agencies.
Compliance timeline
-
1996
Company founded
-
September 8, 2026
Posture last observed by Trust Index
Security & compliance hiring
Open roles on the organization’s public job board, a signal of active investment in security and compliance.
- Lead FedRAMP Security Engineer
- Manager, Customer Trust
- Senior Security Operations Engineer
- Senior Software Security Architect
Subprocessors
Third parties CommVault Systems discloses on its trust center. Linked entries have their own profile in the Trust Index.
31% chain trust: 4 of 13 disclosed subprocessors are themselves in the Trust Index.
- Commvault Systems Limited (UK)
- Commvault Systems (India) Pty. Ltd
- Commvault Systems (Egypt) LLC
- Commvault Systems (Australia) Pty. Ltd
- Microsoft Corporation
- Amazon Web Services (AWS) Applicable for SaaS workloads only
- Oracle Corporation Applicable for SaaS workloads only
- Google Cloud Platform Cloud infrastructure and storage for Commvault SaaS workloads (e.g., Google Workspace Backup)
- Egnyte Applicable for Threatwise only
- Triple C Cloud Computing Ltd. Applicable for Threatwise only
- Persistent Systems Malaysia Sdn Bhd
- Clumio Integration with Commvault Cloud
- Satori Integration with Commvault Cloud
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
