Vendor Trust Library

Search vendor trust portal profiles — certifications, compliance frameworks, pen test records, and data handling policies in one place.

Certifications Compliance Frameworks Pen Tests Data Handling
Cybersecurity
1Password

Password and secrets manager for teams, with Extended Access Management and device trust checks.

ISO/IEC 27001:2022 ISO 27017 and ISO 27018 SOC 2 Type II
View Trust Portal
Communications
8x8

Cloud phone, video and contact centre platform with a significant UK customer base and UK data centres.

ISO/IEC 27001 ISO 27017 and ISO 27018 SOC 2 Type II PCI DSS
View Trust Portal
SaaS / Software
Adobe

Creative Cloud, Document Cloud (Acrobat and Adobe Sign) and Experience Cloud - design, PDF and marketing software delivered as SaaS.

ISO/IEC 27001:2022 ISO/IEC 27018:2019 SOC 2 Type II PCI DSS +1 more
View Trust Portal
HR & People
ADP

Payroll, HR outsourcing and workforce management services, including ADP Workforce Now and multi-country international payroll.

ISO/IEC 27001 ISO 22301 SOC 1 Type II and SOC 2 Type II
View Trust Portal
Cloud & Infrastructure
Akamai

Global CDN, edge security, DDoS protection and cloud computing (including Linode) for web and API delivery.

ISO/IEC 27001:2022 SOC 2 Type II PCI DSS Level 1 Service Provider
View Trust Portal
Cloud & Infrastructure
Amazon Web Services (AWS)

Global cloud infrastructure provider (IaaS/PaaS) delivering compute, storage, database, networking, AI and security services across 30+ regions.

ISO/IEC 27001:2022 SOC 1 / SOC 2 / SOC 3 PCI DSS v4.0 (Level 1 Service Provider) ISO/IEC 27017:2015 +7 more
View Trust Portal
SaaS / Software
Asana

Work management platform for projects, tasks, goals and cross-team workflows.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II and SOC 3
View Trust Portal
Developer Tools
Atlassian

Jira, Confluence, Jira Service Management, Bitbucket and Trello - cloud work management and developer tooling for engineering and IT teams.

ISO/IEC 27001:2022 ISO/IEC 27018:2019 ISO/IEC 27701:2019 SOC 2 Type II and SOC 3 +1 more
View Trust Portal
HR & People
BambooHR

HR information system for small and mid-sized businesses: employee records, onboarding, time off, performance and reporting.

SOC 2 Type II
View Trust Portal
Cybersecurity
BeyondTrust

Privileged access management vendor - Password Safe, Endpoint Privilege Management, Remote Support, Privileged Remote Access and Entitle.

ISO/IEC 27001:2022 ISO/IEC 27701:2019 SOC 2 Type 2 (AWS-hosted services) SOC 2 Type 2 (Azure-hosted services) +12 more
View Trust Portal
SaaS / Software
Box

Content cloud for secure file storage, sharing, e-signature and retention, aimed at regulated industries.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 1, SOC 2 and SOC 3 Type II FedRAMP Moderate
View Trust Portal
Communications
Calendly

Scheduling automation that connects to calendars and video conferencing to book meetings with external parties.

ISO/IEC 27001 SOC 2 Type II
View Trust Portal
SaaS / Software
Canva

Browser-based design and brand templates platform with team collaboration, brand kits and print fulfilment, widely used by marketing teams.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 SOC 2 Type II
View Trust Portal
Cybersecurity
Cisco

Networking, collaboration (Webex), and security products including Duo, Umbrella, Secure Endpoint and Meraki.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO/IEC 27701:2019 SOC 2 Type II +1 more
View Trust Portal
Cloud & Infrastructure
Citrix (Cloud Software Group)

Citrix portfolio from Cloud Software Group - DaaS, NetScaler, Endpoint Management and Secure Private Access.

SOC 2 Type 2 ISO/IEC 27001:2022 ISO/IEC 27701:2022 HIPAA Letter of Assessment +6 more
View Trust Portal
Cloud & Infrastructure
Cloudflare

CDN, DNS, WAF, DDoS protection and Zero Trust access services sitting in front of customer web applications.

ISO/IEC 27001:2022 ISO/IEC 27018:2019 and ISO/IEC 27701:2019 SOC 2 Type II PCI DSS Level 1 Service Provider
View Trust Portal
Cybersecurity
CrowdStrike

Cloud-native cybersecurity platform (Falcon) covering endpoint and cloud detection and response, identity protection, next-gen SIEM and threat intelligence.

ISO/IEC 27001:2022 (including ISO/IEC 27017:2015) ISO 22301:2019 ISO/IEC 42001:2023 SOC 2 Type II - Falcon Platform +12 more
View Trust Portal
Cybersecurity
CyberArk

Privileged access management, secrets management and identity security for human and machine identities.

ISO/IEC 27001 ISO 27017 and ISO 27018 SOC 2 Type II FedRAMP
View Trust Portal
Data & Analytics
Databricks

Data lakehouse and AI platform for engineering, analytics and machine learning workloads.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II PCI DSS
View Trust Portal
Developer Tools
Datadog

Observability platform for infrastructure metrics, APM, log management, and cloud security monitoring.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II and SOC 3 PCI DSS
View Trust Portal
Cloud & Infrastructure
DigitalOcean

Developer-focused cloud: Droplets, managed databases, Kubernetes and Spaces object storage, with EU and UK datacentre regions.

ISO/IEC 27001 SOC 2 Type II and SOC 3 PCI DSS
View Trust Portal
Legal & Compliance
Docusign

Electronic signature and agreement management: eSignature, CLM, Identify and Notary, with EU and UK qualified signature options.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 SOC 1 Type II and SOC 2 Type II PCI DSS +1 more
View Trust Portal
SaaS / Software
Dropbox

Cloud file storage, sync and sharing for teams, including Dropbox Business admin controls, Dropbox Sign e-signature and Dropbox Backup.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO 22301:2019 SOC 1, SOC 2 and SOC 3 Type II
View Trust Portal
HR & People
Employment Hero

All-in-one HR, payroll and benefits platform for SMBs, with a UK payroll offering and an employee engagement app.

SOC 2 Type II ISO/IEC 27001
View Trust Portal

SnapGRC Platform

Want to see how SnapGRC handles vendor risk?

We'll walk you through supplier questionnaires, DPA tracking, sub-processor management, and audit-ready reporting — in under 30 minutes.