Vendor Trust Library

Search vendor trust portal profiles — certifications, compliance frameworks, pen test records, and data handling policies in one place.

Certifications Compliance Frameworks Pen Tests Data Handling
SaaS / Software
Figma

Collaborative interface design, prototyping and FigJam whiteboarding used by product and design teams.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II
View Trust Portal
Cybersecurity
Fortinet

FortiGate firewalls, FortiSASE, FortiEDR and the Fortinet Security Fabric for network and endpoint security.

ISO/IEC 27001 SOC 2 Type II Common Criteria
View Trust Portal
Developer Tools
GitHub

Git hosting, code review, Actions CI/CD, Advanced Security and Copilot, owned by Microsoft.

ISO/IEC 27001:2022 SOC 1 Type II, SOC 2 Type II and SOC 3 FedRAMP
View Trust Portal
Developer Tools
GitLab

End-to-end DevSecOps platform: source control, CI/CD, security scanning and release management.

ISO/IEC 27001:2022 SOC 2 Type II and SOC 3
View Trust Portal
Cloud & Infrastructure
Google Cloud Platform

Google public cloud: compute, storage, BigQuery, Kubernetes Engine and Vertex AI, with EU and UK regions.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO/IEC 27701:2019 SOC 1, SOC 2 and SOC 3 Type II +1 more
View Trust Portal
SaaS / Software
Google Workspace

Google's cloud productivity suite - Gmail, Drive, Docs, Meet and Calendar - with enterprise admin, identity and endpoint management.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 ISO/IEC 27018:2019 SOC 1, SOC 2 and SOC 3 Type II
View Trust Portal
Developer Tools
HashiCorp

Infrastructure automation: Terraform, Vault secrets management, Consul and Boundary, now part of IBM.

ISO/IEC 27001 SOC 2 Type II FedRAMP
View Trust Portal
SaaS / Software
HubSpot

Marketing, sales, service and CMS hubs on a single CRM, widely used by SMB marketing and revenue teams.

ISO/IEC 27001:2022 SOC 2 Type II and SOC 3
View Trust Portal
Cloud & Infrastructure
IBM

IBM Cloud, watsonx AI, and IBM managed infrastructure and consulting services.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO/IEC 27701:2019 SOC 1 Type II and SOC 2 Type II +1 more
View Trust Portal
Finance & Payments
Intuit QuickBooks

Intuit small-business accounting platform - bookkeeping, invoicing, payroll and payments, including QuickBooks Online Advanced.

SOC 1 Type II and SOC 2 Type II PCI DSS ISO/IEC 27001
View Trust Portal
Cybersecurity
JumpCloud

Cloud directory platform combining identity, SSO, MFA and device management, popular with MSPs managing SMB estates.

ISO/IEC 27001 SOC 2 Type II and SOC 3
View Trust Portal
Cybersecurity
KnowBe4

Security awareness training and simulated phishing platform, commonly used to evidence staff training controls.

ISO/IEC 27001 ISO 27017 and ISO 27018 SOC 2 Type II
View Trust Portal
Communications
Mailchimp (Intuit)

Intuit-owned email marketing and automation platform: campaigns, audiences, landing pages and transactional email via Mandrill.

SOC 2 Type II ISO/IEC 27001
View Trust Portal
Cloud & Infrastructure
Microsoft

Global software and cloud provider (Azure, Microsoft 365, Dynamics 365, Power Platform, Intune, Defender) serving enterprise and public sector customers.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 ISO/IEC 27018:2019 ISO/IEC 27701:2019 +11 more
View Trust Portal
Cybersecurity
Mimecast

Email security, archiving, continuity and awareness training, widely used alongside Microsoft 365 in UK SMBs.

ISO/IEC 27001 ISO 27018 SOC 2 Type II Cyber Essentials Plus
View Trust Portal
SaaS / Software
Miro

Online collaborative whiteboard for workshops, diagrams, retrospectives and product discovery.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II and SOC 3
View Trust Portal
SaaS / Software
monday.com

Work operating system for project tracking, CRM and workflow automation across teams.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II and SOC 3
View Trust Portal
Data & Analytics
MongoDB

Document database and MongoDB Atlas managed cloud service with EU and UK regions.

ISO/IEC 27001 ISO 27017 and ISO 27018 SOC 2 Type II PCI DSS
View Trust Portal
Developer Tools
New Relic

Application performance monitoring and observability with an EU data centre region.

ISO/IEC 27001 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II
View Trust Portal
SaaS / Software
Notion

Connected workspace for notes, wikis, projects and databases, with Notion AI and enterprise admin controls.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 ISO/IEC 27018:2019 SOC 2 Type II
View Trust Portal
Cybersecurity
Okta

Independent identity provider (Okta Workforce Identity Cloud and Auth0 Customer Identity) for SSO, MFA, IGA and PAM.

SOC 1 Type 2 SOC 2 Type 2 SOC 3 ISO/IEC 27001:2022 +16 more
View Trust Portal
Cloud & Infrastructure
Oracle

Oracle Cloud Infrastructure, Oracle Database and Fusion Cloud applications for ERP, HCM and CX.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 SOC 1, SOC 2 and SOC 3 Type II PCI DSS
View Trust Portal
Finance & Payments
Oracle NetSuite

Cloud ERP for mid-market businesses: financials, order management, inventory, projects and reporting.

ISO/IEC 27001 SOC 1 Type II and SOC 2 Type II PCI DSS
View Trust Portal
Cloud & Infrastructure
OVHcloud

European cloud and dedicated hosting provider with EU data residency, bare metal, public cloud and private cloud offerings.

ISO/IEC 27001 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO 27701 SOC 1 Type II and SOC 2 Type II
View Trust Portal

SnapGRC Platform

Want to see how SnapGRC handles vendor risk?

We'll walk you through supplier questionnaires, DPA tracking, sub-processor management, and audit-ready reporting — in under 30 minutes.