Sumo Logic security and compliance
Every line below says what we found and when we looked. A missing certification means we did not find evidence of it - never that the vendor does not have it.
At a glance
Audit log: Yes
Verified
www.sumologic.com · retrieved 2026-09-30
FedRAMP authorisation: Yes
Verified
trust.sumologic.com · retrieved 2026-10-03
HIPAA compliance stated: Yes
Verified
trust.sumologic.com · retrieved 2026-10-03
ISO/IEC 27001: Yes
Verified
trust.sumologic.com · retrieved 2026-10-03
PCI DSS stated: Yes
Verified
trust.sumologic.com · retrieved 2026-10-03
SOC 2 Type II: Yes
Verified
trust.sumologic.com · retrieved 2026-10-03
Security and compliance
6 documented attributes| Security and compliance | Value | State and source |
|---|---|---|
| Audit log | Yes | Verified85% confidenceEvidenceExcerpt ...s to 3rd party tools to streamline investigations and resolve failures quickly Compliance and Audit Logging Monitor and audit Sumo Logic usage to meet regulatory and compliance requirements CrowdSt... Excerpt kindrunning text Subject named in excerptyes Sourcehttps://www.sumologic.com/pricing · Primary documentation · retrieved 5 times from 2026-09-02 to 2026-09-30 · every date Confidence85% - capped at the measured precision of this kind of excerpt (85%, prose), which is below the reader's own precision (92%) HistoryStatement history How it was read Read bytext pattern muster:\b(?:with|includes?|provides?|offers?|enable|and|,) (?:full |detailed |comprehensive |complete )?audit (?:logs?|logging|trails?)\bFirst observed2026-09-02 Last checked2026-09-30 Human reviewnot documented Source confidence90% Reader precision92% (measured by hand for this reader) Excerpt-kind precision85% (measured by hand over 417 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
| FedRAMP authorisation | Yes | Verified79% confidenceEvidenceExcerpt ...e audit was completed by Coalfire and covers a period from 1/1/2024 to 12/31/2024. Badges FedRAMP SOC 2 Type II PCI:DSS ISO 27001:2022 HIPAA TX-RAMP GDPR CCPA EU-US DPF VPAT Quick Summary... Excerpt kindrunning text Subject named in excerptno Sourcehttps://trust.sumologic.com/ · Primary documentation · retrieved 2 times from 2026-09-02 to 2026-10-03 · every date Sourcehttps://www.sumologic.com · Primary documentation · retrieved 3 times from 2026-09-02 to 2026-10-03 · every date Confidence79% - capped at the measured precision of this kind of excerpt (79%, prose), which is below the reader's own precision (91%) HistoryStatement history How it was read Read bytext pattern muster:(?<!achieve )(?<!achieving )(?<!like )(?<!such as )(?<!for )\bFedRAMP\b(?! compliance for| Authorization Workshop)(?![^.?!]{0,80}\?)First observed2026-09-02 Last checked2026-10-03 Human reviewnot documented Source confidence90% Reader precision91% (measured by hand for this reader) Excerpt-kind precision79% (measured by hand over 857 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
| HIPAA compliance stated | Yes | Verified64% confidence Read from a menu, footer or link list, not from a sentence about the product EvidenceExcerpt ...werful Integrations Explore apps SOC 2 Type II FedRAMP Moderate Authorized ISO 27001 GDPR HIPAA PCI DSS 4.0.1 CCPA Secure by design Trusted and certified Sumo Logic Dojo AI Discover a m... Excerpt kindnavigation entry (a menu, footer or link list, not a sentence about the product) Subject named in excerptyes Sourcehttps://trust.sumologic.com/ · Primary documentation · retrieved 2 times from 2026-09-02 to 2026-10-03 · every date Sourcehttps://www.sumologic.com · Primary documentation · retrieved 3 times from 2026-09-02 to 2026-10-03 · every date Confidence64% - capped at the measured precision of this reader (64%) HistoryStatement history How it was read Read bytext pattern muster:\bHIPAA\bFirst observed2026-09-02 Last checked2026-10-03 Human reviewnot documented Source confidence90% Reader precision64% (measured by hand for this reader) Excerpt-kind precision84% (measured by hand over 125 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
| ISO/IEC 27001 | Yes | Verified84% confidence Read from a menu, footer or link list, not from a sentence about the product EvidenceExcerpt ...pricing 450+ Powerful Integrations Explore apps SOC 2 Type II FedRAMP Moderate Authorized ISO 27001 GDPR HIPAA PCI DSS 4.0.1 CCPA Secure by design Trusted and certified Sumo Logic Dojo AI D... Excerpt kindnavigation entry (a menu, footer or link list, not a sentence about the product) Subject named in excerptyes Sourcehttps://trust.sumologic.com/ · Primary documentation · retrieved 2 times from 2026-09-02 to 2026-10-03 · every date Sourcehttps://www.sumologic.com · Primary documentation · retrieved 3 times from 2026-09-02 to 2026-10-03 · every date Confidence84% - capped at the measured precision of this kind of excerpt (84%, navigation), which is below the reader's own precision (87%) HistoryStatement history How it was read Read bytext pattern muster:(?<!(?:align|commit|working towards|pursu|accordance|based on|in line with|framework)[^.?!]{0,60})ISO[\s/]*(IEC[\s/]*)?27001(?![^.?!]{0,60}(?:in progress|underway|pursu|working towards|planned|road ?map|commitment|aligned|alignment|framework))First observed2026-09-02 Last checked2026-10-03 Human reviewnot documented Source confidence90% Reader precision87% (measured by hand for this reader) Excerpt-kind precision84% (measured by hand over 125 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
| PCI DSS stated | Yes | Verified69% confidence Read from a menu, footer or link list, not from a sentence about the product EvidenceExcerpt ..., 2026, 12:55 UTC Sumo Logic PCI AOC/ROC and HIPAA Report available for Review The latest PCI DSS Attestation of Compliance (AOC) / Report on Compliance (ROC) and HIPAA report are now ava... Excerpt kindnavigation entry (a menu, footer or link list, not a sentence about the product) Subject named in excerptyes Sourcehttps://trust.sumologic.com/ · Primary documentation · retrieved 2 times from 2026-09-02 to 2026-10-03 · every date Sourcehttps://www.sumologic.com · Primary documentation · retrieved 3 times from 2026-09-02 to 2026-10-03 · every date Confidence69% - capped at the measured precision of this reader (69%) HistoryStatement history How it was read Read bytext pattern muster:\bPCI[\s-]?DSS\bFirst observed2026-09-02 Last checked2026-10-03 Human reviewnot documented Source confidence90% Reader precision69% (measured by hand for this reader) Excerpt-kind precision84% (measured by hand over 125 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
| SOC 2 Type II | Yes | Verified79% confidenceEvidenceExcerpt ...gest everything without budget waste. See pricing 450+ Powerful Integrations Explore apps SOC 2 Type II FedRAMP Moderate Authorized ISO 27001 GDPR HIPAA PCI DSS 4.0.1 CCPA Secure by design Trus... Excerpt kindrunning text Subject named in excerptno Sourcehttps://trust.sumologic.com/ · Primary documentation · retrieved 2 times from 2026-09-02 to 2026-10-03 · every date Sourcehttps://www.sumologic.com · Primary documentation · retrieved 3 times from 2026-09-02 to 2026-10-03 · every date Confidence79% - capped at the measured precision of this kind of excerpt (79%, prose), which is below the reader's own precision (87%) HistoryStatement history How it was read Read bytext pattern muster:SOC\s*2\s*(Type\s*)?(II|2)\bFirst observed2026-09-02 Last checked2026-10-03 Human reviewnot documented Source confidence90% Reader precision87% (measured by hand for this reader) Excerpt-kind precision79% (measured by hand over 857 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
Evidence
Every documented value links to the page we read it from, with the source tier and the day we retrieved it, in its row under Security and compliance. “Evidence” in that row opens the excerpt.
Not found yet (3)
These attributes are open in our research. We looked and found no reliable evidence; 19 addresses were checked and are listed below. That is a statement about our research and never about the product.
| Attribute | State | What we checked |
|---|---|---|
| Data processing agreement offered | Not yet verified | Checked 2 addresses (5 reads), most recently on 2026-10-03: trust.sumologic.com, www.sumologic.com |
| EU data residency stated | Not yet verified | Checked 3 addresses (9 reads), most recently on 2026-10-03: trust.sumologic.com, www.sumologic.com, www.sumologic.com/pricing |
| GDPR compliance stated | Not yet verified | Checked 2 addresses (5 reads), most recently on 2026-10-03: trust.sumologic.com, www.sumologic.com |
An open attribute describes our research and never the product.
Before you decide
Is Sumo Logic suitable for your data?
The documented statements above do not settle suitability for your use. Match the evidence to your proposed plan, data and configuration, then resolve the requirements that remain open.
Check the scope
Does the source cover the exact service, region and plan you would buy? Review the document date and any exceptions.
Test your access
Try the roles, guest sharing and access removal your workflow needs. Record the result and the conditions of the test.
Own the follow-up
Give every unresolved question an owner. Request the relevant evidence before treating it as a passed or failed requirement.