Headspace

Self-hostedVerified May 2026

Headspace Compliance & Certifications

SOC 2 Type IIISO 27001HIPAAHITRUSTFedRAMPGDPRCCPA

Frequently Asked Questions

Does Headspace have SOC 2 Type II?

Yes. Headspace holds SOC 2 Type II, ISO 27001, HIPAA, HITRUST, FedRAMP, GDPR, CCPA certifications. You can view their trust center at www.headspace.com for full security and compliance documentation.

Where can I find Headspace's security documentation?

Headspace publishes their trust center at www.headspace.com. It includes security policies, compliance certifications (SOC 2 Type II, ISO 27001, HIPAA, HITRUST, FedRAMP, GDPR, CCPA), and other documentation.

Does Headspace have ISO 27001 certification?

Yes, Headspace is ISO 27001 certified. This international standard confirms they have implemented a comprehensive information security management system (ISMS).

Is Headspace HIPAA compliant?

Yes, Headspace is HIPAA compliant and can support healthcare organizations that handle protected health information (PHI).