Regulatory Compliance¶
Snowflake is committed to meeting industry-standard regulatory compliance requirements to provide our customers the highest levels of assurance for data integrity, security, and governance.
This topic describes how Snowflake supports customers with ITAR compliance requirements.
Understanding How Snowflake Supports Customers with ITAR Compliance Requirements¶
Snowflake only offers the Business Critical Edition (or higher) for purchase and use in Snowflake Government Regions supporting customer ITAR compliance.
The International Traffic in Arms Regulations (ITAR) is a United States compliance standard that controls and restricts access and export of military and defense articles, services, and related technologies.
Companies that manufacture, provide, or distribute goods and services as specified on the United States Munitions List (USML) may be subject to ITAR.
Snowflake supports customer ITAR compliance in the Snowflake US Government Regions by limiting region access to vetted Snowflake employees and contractors who are eligible to support ITAR workloads. For clarity, customers may not use the Snowflake Service or the Snowflake Government Regions in connection with U.S. “classified information” (e.g. confidential, secret, or top secret).
For more information, see Supported Cloud Regions.
Export-controlled Data and Cross-region Features¶
Unlike commercial regions, where multiple regions belong to the same region group, each government region belongs to its own region group to maintain similar security controls, isolation, and compliance across that group. This distinction is important because, by default, certain features and functionality are limited to the boundaries of a region group.
As an example, replication is only possible to the boundary of a region group. Because a database cannot be replicated to a region outside of its region group, this default restriction prevents an organization within a government region from sharing data in a commercial region without first contacting Snowflake to connect the different region groups. Data sharing is available to customers who belong within the same government region because it is not crossing the boundary of a region group.
If an organization within a government region needs to replicate a database or share data outside of a government region, it must contact Snowflake Support to gain access to other region groups before it can use these features.
Considerations When Working with ITAR Workloads¶
Be aware of entering export-controlled data in any Snowflake metadata fields.