Reviewing Azure Stack Hub integrated compliance

Azure Stack Hub is pre-validated for compliance standards by a formal assessment of the Azure Stack Hub infrastructure, which was conducted by 3PAO.

Azure Stack Hub comes with pre-compiled documentation that applies to controls in the following areas.

• Technology
• Infrastructure

It does not cover tenant applications, people, or processes. The assessments will support getting the required certification for the following compliance regulations:

• Payment Card Industry Data Security Standard (PCI-DSS): Covers the payment card industry
• FedRAMP: Covers government customers
• Cloud Control Matrix (CCM): Deals with comprehensive mapping across multiple standards, including the following:

  - ISO 27001

  - Health Insurance Portability and Accountability Act (HIPAA)

  - HITRUST

  - ITAR

  - NIST SP800-53

It should be noted that Azure Stack Hub is assessed and not certified for compliance, and further information is available...