Vendor Trust Library

Search vendor trust portal profiles — certifications, compliance frameworks, pen test records, and data handling policies in one place.

Certifications Compliance Frameworks Pen Tests Data Handling
Cybersecurity
Palo Alto Networks

Network and cloud security: NGFW, Prisma Access SASE, Prisma Cloud and Cortex XDR/XSIAM.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 SOC 2 Type II FedRAMP
View Trust Portal
Finance & Payments
PayPal

Online payments, checkout and money transfer for businesses and consumers, including Braintree, Zettle card readers and PayPal Business.

PCI DSS Level 1 Service Provider SOC 1 Type II and SOC 2 Type II ISO/IEC 27001
View Trust Portal
HR & People
Personio

European HR platform for SMBs: employee data, absence, recruiting, payroll integrations and performance, hosted in the EU.

ISO/IEC 27001:2022
View Trust Portal
Cybersecurity
Proofpoint

Email security, data loss prevention, insider threat management and security awareness training.

ISO/IEC 27001 ISO 27018 SOC 2 Type II FedRAMP
View Trust Portal
Cybersecurity
Qualys

Cloud-based vulnerability management, policy compliance, web application scanning and PCI ASV services.

ISO/IEC 27001 SOC 2 Type II PCI Approved Scanning Vendor (ASV) FedRAMP
View Trust Portal
Cybersecurity
Rapid7

Vulnerability management (InsightVM), SIEM (InsightIDR), application security and managed detection and response.

ISO/IEC 27001 SOC 2 Type II Cyber Essentials Plus
View Trust Portal
Communications
RingCentral

Cloud phone system, video meetings and contact centre, commonly replacing on-premise PBX in SMBs.

ISO/IEC 27001 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II and SOC 3 PCI DSS
View Trust Portal
Finance & Payments
Sage

UK-headquartered accounting, payroll and HR software including Sage Business Cloud, Sage 50, Sage 200 and Sage Payroll.

ISO/IEC 27001 SOC 2 Type II
View Trust Portal
SaaS / Software
Salesforce

CRM and customer platform - Sales Cloud, Service Cloud, Marketing Cloud, Platform and Agentforce - plus Tableau and MuleSoft.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO/IEC 27701:2019 SOC 1, SOC 2 and SOC 3 Type II +1 more
View Trust Portal
SaaS / Software
SAP

Enterprise ERP, finance and supply chain software including S/4HANA Cloud, SAP Business Technology Platform and Concur.

ISO/IEC 27001:2022 ISO/IEC 27017:2015, ISO/IEC 27018:2019 and ISO/IEC 27701:2019 ISO 22301:2019 SOC 1 Type II and SOC 2 Type II +1 more
View Trust Portal
Cybersecurity
SentinelOne

Autonomous endpoint protection and XDR via the Singularity platform, with managed detection and response services.

ISO/IEC 27001:2022 SOC 2 Type II FedRAMP Moderate
View Trust Portal
Developer Tools
Sentry

Application error monitoring and performance tracing for web, mobile and backend services.

ISO/IEC 27001 SOC 2 Type II
View Trust Portal
SaaS / Software
ServiceNow

Enterprise workflow platform for IT service management, HR service delivery, security operations and GRC.

ISO/IEC 27001:2022 ISO/IEC 27017:2015, ISO/IEC 27018:2019 and ISO/IEC 27701:2019 ISO 22301:2019 SOC 1 Type II and SOC 2 Type II +1 more
View Trust Portal
Communications
Slack (Salesforce)

Salesforce-owned team messaging platform: channels, huddles, Slack Connect, workflow automation and enterprise key management.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO/IEC 27701:2019 SOC 2 Type II and SOC 3 +1 more
View Trust Portal
SaaS / Software
Smartsheet

Spreadsheet-style work management platform for project plans, resource management and reporting.

ISO/IEC 27001 ISO 27017 and ISO 27018 SOC 2 Type II FedRAMP Moderate
View Trust Portal
Data & Analytics
Snowflake

Cloud data platform for warehousing, data sharing and analytics across AWS, Azure and GCP regions.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 1 Type II and SOC 2 Type II PCI DSS
View Trust Portal
Cybersecurity
Sophos

UK-headquartered endpoint, firewall and MDR vendor, widely deployed through the MSP channel via Sophos Central.

ISO/IEC 27001 SOC 2 Type II Cyber Essentials Plus
View Trust Portal
Finance & Payments
Stripe

Payments infrastructure: card acquiring, Checkout, Billing, Connect marketplaces, Radar fraud tooling and Stripe Tax.

PCI DSS Level 1 Service Provider ISO/IEC 27001 SOC 1 Type II and SOC 2 Type II
View Trust Portal
Cybersecurity
Symantec (Broadcom)

Symantec Enterprise Cloud security portfolio from Broadcom: endpoint security, DLP, cloud SWG, CASB, email security, web isolation and VIP authentication.

ISO/IEC 27001:2022 (certificate also covers ISO/IEC 27017:2015 and ISO/IEC 27018:2019) SOC 1 and SOC 2 Type II ISO 9001:2015 IRAP assessment (ACSC Information Security Manual)
View Trust Portal
Cybersecurity
Tenable

Exposure management and vulnerability scanning: Tenable Nessus, Tenable Vulnerability Management and Tenable Cloud Security.

ISO/IEC 27001 SOC 2 Type II FedRAMP Moderate
View Trust Portal
Cybersecurity
Trend Micro

Endpoint, email, cloud workload and network security through the Trend Vision One platform.

ISO/IEC 27001 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 SOC 2 Type II
View Trust Portal
Communications
Twilio

Programmable messaging, voice, email (SendGrid) and verification APIs used for customer notifications and two-factor authentication.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 SOC 2 Type II PCI DSS
View Trust Portal
Cloud & Infrastructure
VMware (Broadcom)

VMware virtualization and cloud infrastructure from Broadcom - VCF, vSphere, NSX, VMware Cloud on AWS, Live Recovery and Tanzu.

ISO/IEC 27001 ISO/IEC 27017:2015 ISO/IEC 27018:2019 ISO 9001:2015 +8 more
View Trust Portal
Finance & Payments
Wise

UK-headquartered international payments provider offering multi-currency business accounts, batch payments and a payouts API.

ISO/IEC 27001 PCI DSS
View Trust Portal

SnapGRC Platform

Want to see how SnapGRC handles vendor risk?

We'll walk you through supplier questionnaires, DPA tracking, sub-processor management, and audit-ready reporting — in under 30 minutes.