SingleStore Helios (Enterprise Edition) and Helios BYOC have achieved PCI DSS v4.0.1 compliance, assessed by independent QSA ControlCase. The certification covers the managed cloud database platform including DBaaS, multi-tenant environments, and BYOC deployments on AWS. Key validated controls include MFA-enforced access management, TLS 1.2+ encryption in transit, AES-256 encryption at rest with optional customer-managed keys, centralized audit logging, and network isolation via dedicated VPCs. The compliance operates under a shared responsibility model — SingleStore secures the platform layer while customers remain responsible for their application-level controls, IP allowlisting, RBAC design, and cardholder data handling. PCI DSS v4.0.1 joins existing certifications including SOC 2 Type II and ISO/IEC 27001.
