Trust center

Start your security review
View & download sensitive information
Ask for information
ControlK

Welcome to ClickHouse's Trust center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust center to learn about our security posture and request access to our security documentation.

Documents

DOCUMENTSBYOC shared responsibility model
Knowledge Base (FAQ)
  • Federal: Is there a ClickHouse version that is secured for US Federal compliance?
View more
Trust center Updates

ClickHouse Response to React (CVE-2025-55182) and Next.js (CVE-2025-66478) vulnerabilities

Copy link
Vulnerabilities

ClickHouse Cloud is not impacted by the recently published vulnerabilities affecting React (CVE-2025-55182) and Next.js (CVE-2025-66478). Our security team has completed a thorough investigation and confirmed that our platform does not utilize the specific React Server Components (RSC) configurations required for exploitation. No action is required by our customers.

ClickHouse Response to Shai-Hulud 2.0 Supply Chain Attacks

Vulnerabilities

ClickHouse is not affected by the Shai-Hulud 2.0 npm supply chain attack. Our security team has audited our software supply chain and confirmed that our products and infrastructure remain secure. We continue to monitor the situation to ensure ongoing protection for our customers.

If you think you may have discovered a vulnerability, please send us a note.
Report issue