Vultr’s highest priority is ensuring the safety and security of customer instances and data.

Ensuring the Vultr cloud platform remains secure and globally compliant with global laws such as the United States’ Health Insurance Portability and Accountability Act (HIPAA), European Union General Data Protection Regulation (GDPR), and India’s Digital Personal Data Protection Act (DPDPA) is essential, and Vultr regularly undergoes third-party audits and assessments to identify any potential opportunities for improvement.

Vultr has just completed an independent assessment for compliance with the EU Digital Operational Readiness Act (DORA). BDO has assessed that Vultr aligns to the DORA regulation and has provided a Vultr DORA Compliance Customer Trust Statement. This statement is available to customers within the my.vultr customer portal alongside Vultr’s other compliance artifacts.

Vultr maintains a central control framework to address the DORA requirements for critical ICT providers, leveraging standards such as ISO 27001 and the SOC 2 Trust Services Criteria. BDO’s assessment utilized a unified control framework, mapping each DORA article to Vultr’s existing ISO 27001 certification and SOC 2 Trust Services Criteria (Security, Confidentiality, and Availability). Their methodology included a review of Vultr’s policy framework, resilience and response plans, incident notification protocols, operational resilience testing, and third-party risk management practices. This was further supported by interviews with key control owners to provide insight into current practices.

This successful assessment reinforces Vultr’s efforts to maintain services that are secure, reliable, and compliant with regulatory expectations, as well as our commitment to our valued European and global customers.

For more information, please visit Vultr’s compliance page.