# Compliance validation for Amazon Keyspaces (for Apache Cassandra) Third-party auditors assess the security and compliance of Amazon Keyspaces (for Apache Cassandra) as part of multiple Amazon compliance programs. These include: + ISO/IEC 27001:2013, 27017:2015, 27018:2019, and ISO/IEC 9001:2015 + System and Organization Controls (SOC) + Payment Card Industry (PCI) + Federal Risk and Authorization Management Program (FedRAMP) High + Health Insurance Portability and Accountability Act (HIPAA) To learn whether an Amazon Web Services service is within the scope of specific compliance programs, see [Amazon Web Services services in Scope by Compliance Program](https://aws.amazon.com/compliance/services-in-scope/) and choose the compliance program that you are interested in. For general information, see [Amazon Web Services Compliance Programs](https://aws.amazon.com/compliance/programs/). You can download third-party audit reports using Amazon Artifact. For more information, see [Downloading Reports in Amazon Artifact](https://docs.aws.amazon.com/artifact/latest/ug/downloading-documents.html). Your compliance responsibility when using Amazon Web Services services is determined by the sensitivity of your data, your company's compliance objectives, and applicable laws and regulations. For more information about your compliance responsibility when using Amazon Web Services services, see [Amazon Security Documentation](https://docs.amazonaws.cn/security/).