CERTIFICATE OF REGISTRATION
ISO/IEC 27018:2019

The Certification Body of Schellman Compliance, LLC hereby certifies that the following organization
conforms to the control guidance of ISO/IEC 27018:2019

Zscaler, Inc.

120 Holger Way, San Jose, California 95134
for the following scope of registration
The scope of the ISO/IEC 27018:2019 certification covers the control objectives, controls, and guidance for implementing measures
to protect personally identifiable information (PII) in accordance with the privacy principles in ISO/IEC 29100 for the cloudcomputing environment relevant to the information security management system (ISMS) and privacy information management
system (PIMS) supporting the Zscaler global cloud in the EMEA (Europe, Middle East and Africa), NA (North America), LATAM (LatinAmerica) and APAC (Asia-Pacific) regions for its Security as a Service platform, including operations employees, and in accordancewith the statement of applicability, version 7.3, dated December 19, 2023, and aligned to meet the ISO 27701:2019 PIMS
requirements, control implementation guidance, and additional control set as a personally identifiable information (PII) processor.
which includes the following in-scope location(s) on page 2 of 2Certificate Number: 1316852-5
Authorized by:

Ryan Mackie

Principal, Schellman Compliance, LLC
4010 W Boy Scout Blvd., Suite 600
Tampa, Florida 33607, United States
www.schellman.com

Issue Date

Original Registration Date

Expiration Date

Certificate Version

May 20, 2024

October 23, 2020

June 23, 2026

Version 5

Page 1 of 2
CONDITIONS & LIMITATIONS:
1. The aforementioned organization has a perpetual responsibility to maintain conformance with ISO 27018:2019 during the period of certification.
2. This certificate is subject to the satisfactory completion of annual surveillance audits by Schellman Compliance, LLC
3. ISO/IEC 27018:2019 compliance audits are not designed to detect or prevent criminal activity or other acts that may result in an information security breach. As such, this certification should not be
construed as a guarantee or assurance that an organization is unsusceptible to information security breaches.
4. The information in this document is provided “AS IS”, without warranties of any kind. Schellman Compliance, LLC expressly disclaims any representations and warranties, including, without limitation,
the implied warranties of merchantability and fitness for a particular purpose.
5. This certificate is the property of Schellman Compliance, LLC and is bound by the conditions of contract. The authenticity of this certificate can be validated by contacting Schellman Compliance, LLC

Certificate Number: 1316852-5

In-Scope Location(s)Location

Function / Role

San Jose, California, United States

Corporate headquarters and main location of the ISMS

Page 2 of 2
CONDITIONS & LIMITATIONS:
1. The aforementioned organization has a perpetual responsibility to maintain conformance with ISO 27018:2019 during the period of certification.
2. This certificate is subject to the satisfactory completion of annual surveillance audits by Schellman Compliance, LLC
3. ISO/IEC 27018:2019 compliance audits are not designed to detect or prevent criminal activity or other acts that may result in an information security breach. As such, this certification should not beconstrued as a guarantee or assurance that an organization is unsusceptible to information security breaches.
4. The information in this document is provided “AS IS”, without warranties of any kind. Schellman Compliance, LLC expressly disclaims any representations and warranties, including, without limitation,
the implied warranties of merchantability and fitness for a particular purpose.
5. This certificate is the property of Schellman Compliance, LLC and is bound by the conditions of contract. The authenticity of this certificate can be validated by contacting Schellman Compliance, LLC