Vendor Trust Library

Search vendor trust portal profiles — certifications, compliance frameworks, pen test records, and data handling policies in one place.

Certifications Compliance Frameworks Pen Tests Data Handling
Sort: A – Z Recently Added Most Viewed 154 vendors
Other
Enterprise Mobility

Global mobility provider operating Enterprise Rent-A-Car, National and Alamo brands, offering car and van rental, fleet management and carsharing.

View Trust Portal
Other
Evri

UK parcel delivery company operating a courier and ParcelShop network for consumer and retailer deliveries across the UK and internationally.

ISO 9001:2015 ISO 14001:2015 ISO 45001:2018
View Trust Portal
Other
FedEx

Global transportation and logistics company providing express parcel, freight and e-commerce delivery services in over 220 countries.

ISO 9001
View Trust Portal
SaaS / Software
Figma

Collaborative interface design, prototyping and FigJam whiteboarding used by product and design teams.

ISO/IEC 27001:2022 ISO 27017, ISO 27018 and ISO 27701 SOC 2 Type II
View Trust Portal
Cybersecurity
Fortinet

FortiGate firewalls, FortiSASE, FortiEDR and the Fortinet Security Fabric for network and endpoint security.

ISO/IEC 27001 SOC 2 Type II Common Criteria
View Trust Portal
Other
G4S

UK security and facility services business, part of US-owned Allied Universal, providing manned guarding, cash solutions, FM and security technology.

SIA Approved Contractor Scheme NSI Guarding Gold, EMS Gold, Health & Safety Gold ISO 9001:2015
View Trust Portal
Communications
Gamma Communications

UK provider of cloud communications, UCaaS, SIP trunking and connectivity services, sold mainly through a channel partner network.

ISO/IEC 27001:2022 ISO 9001:2015 ISO 14001:2015 ISO 22301:2019 +2 more
View Trust Portal
Developer Tools
GitHub

Git hosting, code review, Actions CI/CD, Advanced Security and Copilot, owned by Microsoft.

ISO/IEC 27001:2022 SOC 1 Type II, SOC 2 Type II and SOC 3 FedRAMP
View Trust Portal
Developer Tools
GitLab

End-to-end DevSecOps platform: source control, CI/CD, security scanning and release management.

ISO/IEC 27001:2022 SOC 2 Type II and SOC 3
View Trust Portal
Finance & Payments
GoCardless

Bank payment platform specialising in Direct Debit and open banking collections for recurring payments, used by businesses worldwide.

ISO 27001
View Trust Portal
Cloud & Infrastructure
Google Cloud Platform

Google public cloud: compute, storage, BigQuery, Kubernetes Engine and Vertex AI, with EU and UK regions.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO/IEC 27701:2019 SOC 1, SOC 2 and SOC 3 Type II +1 more
View Trust Portal
SaaS / Software
Google Workspace

Google's cloud productivity suite - Gmail, Drive, Docs, Meet and Calendar - with enterprise admin, identity and endpoint management.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 ISO/IEC 27018:2019 SOC 1, SOC 2 and SOC 3 Type II
View Trust Portal
Developer Tools
HashiCorp

Infrastructure automation: Terraform, Vault secrets management, Consul and Boundary, now part of IBM.

ISO/IEC 27001 SOC 2 Type II FedRAMP
View Trust Portal
HR & People
Hays

UK-headquartered specialist recruitment group listed on the London Stock Exchange, placing permanent, temporary and contract professional staff.

Cyber Essentials
View Trust Portal
HR & People
Health Assured (Wisdom Wellbeing)

UK employee assistance programme provider delivering counselling, mental health and wellbeing support to employers; trades as Wisdom Wellbeing.

ISO 27001 Cyber Essentials Plus ISO 9001 ISO 14001 +1 more
View Trust Portal
Finance & Payments
Hiscox

Specialist insurer providing UK business cover including professional indemnity, public and employers’ liability, cyber and contents.

View Trust Portal
Cybersecurity
Hornetsecurity

Cloud security provider for Microsoft 365, covering email security, backup, compliance, permission management and awareness training.

NF EN ISO/IEC 27001:2023 ISO/IEC 27001:2022 SOC 2 Type 2 ISO 9001:2015 +4 more
View Trust Portal
SaaS / Software
HubSpot

Marketing, sales, service and CMS hubs on a single CRM, widely used by SMB marketing and revenue teams.

ISO/IEC 27001:2022 SOC 2 Type II and SOC 3
View Trust Portal
Cybersecurity
Huntress

Managed detection and response, EDR, ITDR and security awareness training delivered through a 24/7 SOC, built primarily for MSPs and SMBs.

SOC 2 Type 2 CMMC documentation package
View Trust Portal
Cloud & Infrastructure
IBM

IBM Cloud, watsonx AI, and IBM managed infrastructure and consulting services.

ISO/IEC 27001:2022 ISO/IEC 27017:2015 and ISO/IEC 27018:2019 ISO/IEC 27701:2019 SOC 1 Type II and SOC 2 Type II +1 more
View Trust Portal
Finance & Payments
Intuit QuickBooks

Intuit small-business accounting platform - bookkeeping, invoicing, payroll and payments, including QuickBooks Online Advanced.

SOC 1 Type II and SOC 2 Type II PCI DSS ISO/IEC 27001
View Trust Portal
Other
Iron Mountain

Global provider of records and information management, secure storage, document destruction, data centres and IT asset disposition.

ISO/IEC 27001:2022 ISO/IEC 27701:2019 ISO 9001:2015 ISO 14001:2015 +4 more
View Trust Portal
Other
ISS Facility Services UK

ISS Facility Services Limited provides cleaning, catering, security and workplace facilities management in the UK, part of Denmark-based ISS A/S.

View Trust Portal
Cybersecurity
JumpCloud

Cloud directory platform combining identity, SSO, MFA and device management, popular with MSPs managing SMB estates.

ISO/IEC 27001 SOC 2 Type II and SOC 3
View Trust Portal

SnapGRC Platform

Want to see how SnapGRC handles vendor risk?

We'll walk you through supplier questionnaires, DPA tracking, sub-processor management, and audit-ready reporting — in under 30 minutes.