Vendor Sheet
Enterprise Data Security Requirements
This datasheet outlines MongoDB Atlas security capabilities for protecting enterprise data across cloud and multi-cloud environments. MongoDB emphasizes always-on security by default while supporting authentication, authorization, auditing, encryption, network security, and compliance requirements. Authentication options include SCRAM, x.509 certificates, Kerberos, LDAP, and AWS IAM, while granular role-based access controls support separation of duties. Atlas provides native auditing, TLS encryption in transit, encryption at rest, Client-Side Field Level Encryption, isolated VPCs, private endpoints, and IP access controls. Its compliance portfolio includes ISO 27001, ISO 27017, ISO 27018, SOC 2 Type II, PCI-DSS, GDPR, HIPAA, CSA STAR, and SOC 2 + HITRUST.
