GitHub

Developer Tools United States Website Reviewed Sept. 2, 2026

Git hosting, code review, Actions CI/CD, Advanced Security and Copilot, owned by Microsoft.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body GitHub Enterprise Cloud and supporting ISMS — — Current
SOC 1 Type II, SOC 2 Type II and SOC 3 Independent third-party auditor GitHub Enterprise Cloud. SOC 3 published publicly; SOC 1 and SOC 2 available under NDA — — Current
FedRAMP US federal authorising body GitHub Enterprise Cloud for US federal customers — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Processor under the Microsoft/GitHub DPA; EU data residency available on Enterprise Cloud
NIST Cybersecurity Framework
Partial
Advanced Security supports NIST CSF protect and detect outcomes

Assess GitHub in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register