Trust Center
StreamNative provides a real-time data streaming platform, built on Apache Kafka and Apache Pulsar, that keeps the current state of a business continuously available to applications, analytics, and AI agents. Customers run mission-critical workloads on StreamNative, from payment flows and customer engagement to security analytics, across Serverless, Dedicated, BYOC, and Private Cloud deployments. That responsibility comes with an obligation to be transparent about how we protect the data that flows through our platform.
Security is a core part of how StreamNative designs, builds, and operates its platform. We apply a structured, risk-based approach to protecting customer data, with defined policies, controls, and processes that are continuously monitored and improved. This approach is backed by an independently verified compliance program, including ISO 27001 for information security management and ISO 42001 for AI governance. StreamNative is also PCI DSS compliant (SAQ-A), and because all payments are processed by Stripe, we do not store, process, or transmit cardholder data.
This Trust Center brings together StreamNative’s practices across security, privacy, compliance, and responsible AI, along with the documentation your team needs to complete security reviews quickly.
Subprocessors
- Does StreamNative encrypt sensitive data at rest and in transit?
- Are development and testing separate from the production environment?
- What kind of training and awareness programs does StreamNative provide to its employees?
- What security certifications and compliance standards does StreamNative adhere to?
- How does StreamNative handle data privacy and compliance with U.S. regulations?