AWS Marketplace Vendor Insights now includes PCI DSS, HIPAA, and GDPR certifications

AWS Marketplace sellers can now add additional certifications to their Vendor Insights security profiles, including PCI Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), and General Data Protection Regulation (GDPR) compliance. These are in addition to already available certifications for FedRAMP, ISO 27001, and SOC 2 Type 2. AWS Marketplace Vendor Insights helps streamline the complex third-party software risk assessment process by enabling sellers to make security and compliance information available through AWS Marketplace. Buyers can more quickly discover products in AWS Marketplace that meet their security and certification standards by searching for and accessing vendor insights profiles.

Vendor Insights helps reduce the need for an extensive IT security assessment and discovery process for third-party vendors. Using Vendor Insights can help buyers reduce assessment lead time to a few hours by allowing buyers to access the vendor’s validated security profile, saving months of effort from questionnaires and back-and-forth with vendors. Buyers can continually monitor their software’s security posture post-procurement and receive notifications for security and compliance events.

Vendor Insights is available in all public AWS Regions where AWS Marketplace is available.

Discover products with Vendor Insights security profiles in AWS Marketplace. To learn more, visit the AWS Marketplace Vendor Insights webpage.