--- title: "Datadog achieves Cyber Essentials Plus certification for its UK operations and UK1 production environment" description: "Learn how Datadog’s Cyber Essentials Plus certification helps UK customers assess supplier security practices and meet procurement requirements." author: "Sophie Wang, Swetha Narendhran, Jason Hansen" date: 2026-11-09 tags: ["infrastructure monitoring", "log management", "digital experience monitoring", "security", "agent observability", "apm", "aws", "compliance", "devsecops"] blog_type_id: the-monitor locale: en --- UK organizations are balancing the need to modernize and scale with growing expectations around supplier security, data governance, and operational resilience. Choosing an observability platform means evaluating not only what it enables teams to see and do but also the platform provider's own security practices. Datadog has achieved [Cyber Essentials Plus (CE+)](https://www.ncsc.gov.uk/cyberessentials/overview) certification for its UK operations. This milestone provides customers with additional independently tested evidence to consider when assessing Datadog as a technology provider, while we reinforce our continued investment in the United Kingdom. The certification builds on the July 2026 launch of [Datadog’s new availability zone in the United Kingdom (UK1)](https://www.datadoghq.com/uk1/). UK1 gives organizations the option to [host their observability and security data within the UK](https://www.datadoghq.com/blog/observability-data-hosting-uk-aws.md) while using Datadog. With the UK1 production environment included in Datadog's CE+ assessment boundary, customers can consider UK-local hosting and independently tested cybersecurity controls together during supplier-security, governance, and procurement reviews. ## What is Cyber Essentials Plus? Cyber Essentials is a UK government-backed certification scheme developed by the National Cyber Security Centre (NCSC). It focuses on five technical control areas designed to help organizations protect themselves against common internet-based threats: - Firewalls - Secure configuration - Security update management - User access control - Malware protection Cyber Essentials Plus covers the same controls as the foundational Cyber Essentials certification but adds an independent technical assessment to verify that the controls are in place within the assessed environment. For security, governance, and procurement teams responsible for reviewing technology providers, CE+ offers independently tested evidence that they can incorporate into their assessments. Datadog's CE+ certification applies to its defined UK assessment boundary, including its UK operations, UK1 production environment, and the UK-based employees, end-user devices, and associated infrastructure supporting the UK location. The [Datadog Trust Center](https://trust.datadoghq.com/) provides the certificate and complete scope details. ## Providing additional assurance for UK organizations Technology ecosystems are becoming more interconnected, making the security practices of suppliers an increasingly important part of an organization's overall risk posture. CE+ gives customers independently tested evidence that they can consider during third-party security reviews, procurement processes, and supply-chain assessments. This additional assurance is particularly relevant for organizations in regulated and public-sector environments: - **Government and public sector organizations** can use the certification as additional evidence when assessing supplier security and managing procurement requirements. - **Financial services organizations** can consider it as part of broader third-party risk, data governance, and operational-resilience programs. - **Healthcare organizations** can use it to support supplier assessments involving sensitive systems and data. - **Higher-education institutions** can draw on it when evaluating technology providers supporting research, administrative systems, and digital services for students and staff. CE+ does not replace each customer's own security or compliance responsibilities. Instead, it provides independently verified evidence of the controls operating within Datadog's defined UK assessment boundary. ## Building trust alongside UK-local hosting When organizations evaluate a cloud service, certification is only one part of the decision. They may also consider where their data is hosted, which capabilities are available in-region, and whether teams can maintain visibility across increasingly complex environments. Our CE+ certification builds on the foundation established by UK1, Datadog's availability zone hosted on the [AWS Europe (London) Region](https://www.datadoghq.com/about/latest-news/press-releases/datadog-expands-uk-data-hosting-capabilities-on-aws-europe-london-region/). UK1 enables customers to host observability and security data within the UK, which helps them keep telemetry data closer to their workloads, reduce latency, and support audit and governance workflows. Organizations can use Datadog to bring together telemetry from across infrastructure, applications, logs, networks, digital experiences, and security tools in one platform. This shared context helps operations, engineering, and security teams understand dependencies, investigate incidents, and maintain visibility across cloud, hybrid, and AI environments. Datadog’s CE+ assessment boundary includes the UK1 production environment. Together, UK1 and CE+ help customers evaluate where their core observability and security data is hosted and how the supporting UK environment is secured, without compromising on platform breadth.  ## Continuing our investment in the UK CE+ is one milestone in Datadog's broader commitment to supporting UK customers with the regional infrastructure, transparency, and security assurance they need. We are continuing this work by preparing a response to the [NCSC Cloud Security Principles](https://www.ncsc.gov.uk/collection/cloud/the-cloud-security-principles), which will provide customers with more information about how Datadog approaches the security goals defined by the NCSC. We also plan to pursue [Defence Cyber Certification (DCC)](https://iasme.co.uk/defence-cyber-certification/), extending our assurance work for organizations operating within the UK defense supply chain. Visit the [Datadog Trust Center](https://trust.datadoghq.com/) to learn more about our CE+ certification and review the complete assessment scope. [Request a personalized demo](https://www.datadoghq.com/uk1/) with a Datadog expert to explore how UK1 can support your organization’s observability, security, and UK-local hosting requirements. If you're not using Datadog, .