IBM Cloud® compliance: PINAKES
Isometric illustration of platforms and objects representing various IBM cloud compliance programs
What is PINAKES?

PINAKES is a rating framework developed by the Spanish banking association Centro de Cooperación Interbancaria (CCI) (link resides outside The framework is designed to manage and monitor the cybersecurity controls of technology suppliers supporting Spanish financial entities. PINAKES is based upon the due diligence and compliance directions provided in European Banking Authority Guidelines (EBA/GL/2019/02) (link resides outside

PINAKES assessments are conducted by CCI-approved, independent third-party evaluators. PINAKES evaluations include information security management, incident management, encryption, systems operation, resilience and access control. The evaluators assess services by considering three main aspects: integrity, confidentiality and availability. These three concepts are then scored from D to A+ for a final rating (such as ABA or BAC).

Reports and other documentation

Contact an IBM representative to request PINAKES reports



IBM Position

IBM Cloud has secured an AAA rating for PINAKES and is listed as an evaluated supplier on the PINAKES website here (link resides outside

IBM Cloud’s PINAKES AAA rating demonstrates that IBM has a firm commitment to service integrity, confidentiality and availability.

Services in Scope

IBM has qualified AAA on the following categories of PINAKES : IaaS, PaaS and VPC

Take the next step

Questions about a compliance program? Need a protected compliance report? We can help.

See more compliance programs