Announcing SOC 1, FedRAMP 20x Class A, PCI, and HIPAA
Harness, Wednesday, October 28th, 2026
Harness announces its first SOC 1 audit, FedRAMP 20x Class A, and first PCI DSS and HIPAA Security Rule assessments.
SOC 1 and FedRAMP 20x Class A apply to the Harness Autonomous SDLC Platform, while PCI DSS v4.0.1 and HIPAA Security Rule assessments apply to the Runtime Protection Agent.
SOC 1 covers controls relevant to customers' financial reporting and can reduce SOX audit effort.
FedRAMP 20x Class A covers the Platform, CI, CD, STO, SCS, IaCM, DBD, Harness Code and Resilience Testing, and agencies can begin assessing Harness via the FedRAMP Marketplace.
The runtime Protection Agent was assessed against PCI DSS v4.0.1 and the HIPAA Security Rule. It can process and redact cardholder data at the edge and can sign a Business Associate Agreement with eligible customers.