Fortinet

Cybersecurity United States Website Reviewed Sept. 2, 2026

FortiGate firewalls, FortiSASE, FortiEDR and the Fortinet Security Fabric for network and endpoint security.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body Fortinet cloud services and supporting ISMS — — Current
SOC 2 Type II Independent third-party auditor FortiCloud and in-scope Fortinet SaaS services; report available under NDA — — Current
Common Criteria National certification scheme FortiGate and selected Fortinet products evaluated under Common Criteria — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
Confirm which Fortinet cloud services are named on the certificate
SOC 2 Type 2
Full
GDPR 2016/679
Full
Fortinet acts as processor for FortiCloud customer data; EU data residency options available
NIST Cybersecurity Framework
Partial
Products commonly mapped to NIST CSF controls

Assess Fortinet in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register