FedEx

Other United States Website Reviewed Sept. 22, 2026

Global transportation and logistics company providing express parcel, freight and e-commerce delivery services in over 220 countries.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO 9001 LRQA, Inc. Confirmed by both FedEx and LRQA. Entities listed: Federal Express Corporation and FedEx Freight. The 2024 certification consolidates legacy FedEx Express, Ground and Services into a single global certification. Version year not stated; UK entity not named. — — Current

Compliance Frameworks

ISO 9001:2015
Partial
Certifying body confirmed as LRQA, but no version year, no certificate number (behind a download form) and no explicit UK entity or UK certificate.
GDPR 2016/679
Partial
Binding Corporate Rules and EU model contractual clauses published; no customer DPA. DPO not named and no DPO contact published.

Contact & Responsible Disclosure

  • Responsible Disclosure View policy ↗
  • Bug Bounty Platform Synack (VDP, not stated as paid)

Entity split worth noting

The **UK/European controller is FedEx Express International B.V.** (Hoofddorp, Netherlands), while the **ICO registration sits with Fedex Express UK Limited** (ZA302653, Atherstone, registered 21 Dec 2017, expires 20 Dec 2026, Tier 3) — two different entities. The ICO number comes from the ICO register, not from FedEx.

A HackerOne page exists at hackerone.com/fedex, but **FedEx’s own trust centre points to Synack**, so Synack is the authoritative channel. No security contact email is published; reporting is via the Synack portal.

ISO 14001, ISO 45001, ISO 27001 and Cyber Essentials: no public evidence found.

Assess FedEx in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register