Security and compliance for Analyzer in Acrobat

Review the current compliance status, security safeguards, and compliance resources available for Analyzer in Acrobat.

Compliance roadmap for Analyzer in Acrobat

Analyzer in Acrobat is built on Adobe's audited cloud infrastructure and is designed from the ground up to meet the same compliance bar as Adobe Acrobat Sign. Formal certifications for Analyzer in Acrobat are in progress. This page explains what's available today and what's coming, so you always know where things stand.

Where things stand today

• Analyzer in Acrobat runs on infrastructure governed by Adobe's Common Controls Framework (CCF), the same control framework underlying Acrobat Sign infrastructure.
• Formal certifications and audit reporting that explicitly name these services are in progress and are expected to be completed as part of Adobe's standard audit processes, as shown in the table below.
• Because the Compliance List in the Adobe Trust Center lists only services with a completed, named attestation or report, Analyzer in Acrobat isn't yet listed there. Certifications are typically posted after the close of Adobe's annual audit cycle and a mandatory validation period. Adobe expects the Analyzer in Acrobat compliance certifications to be posted in the November/December timeframe.

Until then, this page and direct conversations with your Adobe Sales contact provide the most current information about the compliance and security posture of Analyzer in Acrobat.

Available now

HIPAA Ready: Adobe is prepared to enter into Business Associate Agreements (BAAs) covering this service. An external review report is currently in process.

Additional certifications in progress

A target date indicates work in progress. It doesn't mean that Analyzer in Acrobat currently holds the listed certification or assessment.

Visit the Adobe Trust Center for published certifications or contact your Adobe Sales contact for the latest status specific to Analyzer in Acrobat.

Need more details for a security review?

A security overview with data-flow diagrams showing how Analyzer in Acrobat operates within that environment is available in the Analyzer in Acrobat Security Overview.

Customers conducting a security or privacy review can request a documentation packet under NDA covering existing SOC 2 and ISO reports for Adobe's audited environment, with details about the controls that govern data handling. A completed CAIQ (Consensus Assessments Initiative Questionnaire) self-assessment is also available on request.

Contact your Adobe Sales contact to request this packet.

Use Analyzer with HIPAA-regulated data

Analyzer in Acrobat is HIPAA Ready. Organizations that plan to process protected health information (PHI) must complete the applicable Business Associate Agreement (BAA) process with Adobe before using Analyzer for that purpose.

Contact your Adobe Sales contact to begin the BAA process.

To request HIPAA readiness and complete the required enablement process, see Enable HIPAA readiness for Analyzer in Acrobat.

Things to know

• HIPAA Ready doesn't mean that every use of Analyzer automatically complies with HIPAA.
• Compliance programs shown with a target date are still in progress.
• Target dates can change while certification and assessment work is underway.
• Your organization remains responsible for using Analyzer in accordance with its agreements with Adobe and applicable legal and regulatory requirements.
• Detailed architecture and other controlled security information are available through the NDA documentation rather than this public Help page.