Skip to content

Cookie preferences

We use cookies for our own analytics, to see how our campaigns perform and, if you allow it, to load content from other services such as the Google site search. We never sell your data. Necessary cookies keep the site working and cannot be switched off. See our Cookie Policy for details and our Privacy Policy for how we handle personal data.

Security, load balancing and remembering your cookie choice.

Show us which pages people read, how they find the site and where they get stuck, so we can improve it (Google Analytics, Microsoft Clarity).

Show us which of our ad campaigns bring visitors to the site and remember the campaign or partner link you arrived from (Google Ads, LinkedIn, Meta, partner program). We do not use these cookies to build advertising profiles.

Load the site search from Google when you use it. Google sets its own cookies and shows ads in the search results.
© 2026 The ThingsBoard Authors
22.5k Try for free

ThingsBoard Cloud

Choose your data region

Your data stays in the region you choose, for residency and compliance. No credit card required.

North America Data stored in North America Europe Data stored in the European Union

Rather run it yourself? Install on your own servers

Compliance

ThingsBoard is certified to ISO/IEC 27001 and ISO 9001, independently tested every year, and declares its GDPR and CCPA compliance through its own data protection program.

Certifications and assurance

ISO/IEC 27001:2022

Information security management system

Certified · 9 Sept 2026

Reg. No 372-02-270-00460

Learn more

ISO 9001:2015

Quality management system

Certified · 9 Sept 2026

Reg. No 372-02-100-02170

Learn more
Certification body Swiss Approval North America (IAS-accredited). Both certificates were issued on 9 September 2026 and are valid until 8 September 2027, within a three-year cycle that runs to 8 September 2029, with a surveillance audit every year.
Certified scope Software design and development, maintenance, training, IT consulting services, support services, integration services; cloud services; software QA testing; software licensing.
Penetration testing An independent penetration test runs every year. The latest, by DataArt, took place in February 2026, with a retest in March 2026.
Data centers ThingsBoard Cloud and Private Cloud run in data centers with ISO 27001, PCI DSS and SOC 2 attestations (AWS for ThingsBoard Cloud; AWS, Azure or GCP for Private Cloud).
Verify a certificate (opens in a new tab)

On swissapproval.ch, with the registration number from a card above.

Using our compliance in your audit

You can certify the solution you build on ThingsBoard, for example to ISO/IEC 27001. Our ISO certificates count as supplier evidence in your audit, and under NDA we share the Statement of Applicability and audit reports.

Request the Statement of Applicability

The platform gives you the controls auditors look for, so you don't need to build them from scratch:

Privacy and data protection

We protect personal data under the GDPR and the CCPA through our own data protection program, backed by the same ISO 27001 controls.

GDPR

For personal data of people in the EU; we apply data minimization to all personal data we process. Our DPA includes standard-contractual-clause terms for transfers outside the EU (DPA §11).

Learn more

CCPA

For personal information of California residents. We don't sell personal information.

Learn more
  • Data stays in the EU on ThingsBoard Cloud’s EU region, and never moves between regions.
  • Our DPA includes standard-contractual-clause terms for transfers outside the EU (DPA §11).
  • Published sub-processors, with notice of material changes.
  • Data subject requests and breach notification as set out in our DPA.
Self-declared

We declare our GDPR and CCPA compliance ourselves, and commit to GDPR contractually in our DPA.

Read next

Can’t find what you need?

Our security team answers questions, shares documents under NDA and handles vulnerability reports.