--- title: "Netlify Trust Center" description: "Review Netlify’s compliance programs, subprocessors and security documentation." source: "https://www.netlify.com/trust-center/" last_updated: "2026-10-03T04:51:47.000Z" --- # Netlify Trust Center Welcome to Netlify's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Explore our security posture and request access to our documentation below. [Get access](https://app.netlify.com/user/trust-center#content) ## Netlify is reviewed and trusted by - ![Meta](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=8d0d29fd-f80d-42f8-a118-18912f63722d&v=f7dbbcd0de786bda) - ![Nestlé Purina Petcare](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=dbe8a986-4437-4db3-90ef-f11511118b13&v=d7e7849555eafaf3) - ![BabyBjörn](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=d149f5b0-0248-4cc1-9eea-55741e1c05d8&v=378f1accbc5d9a23) - ![Adyen](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=423ab72c-17df-4736-92f5-55581bd1613a&v=11c67e1937a4d1ff) - ![Autodesk](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=c8b0488f-2348-4612-bfc3-a2b7b8563fd1&v=78dca91e8d3882ec) - ![Stack Overflow](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=7b850ee4-c3dc-4abf-919e-97dbabb7ac37&v=c430a99c977baeda) - ![Vodafone](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=796b6477-f0f5-43da-9862-20bbe8027508&v=93a7af34f37babaf) - ![Danone](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=b8bfc63e-d623-4bfd-83b8-ae79fff17c06&v=a0a9a96500e24f59) - ![Finish Line](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=29dab591-7290-4f4a-ad29-7a2baf4e239c&v=a65b89bef7bca8d3) - ![University of Wisconsin Health](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=a66d18fa-e3de-4991-a3f5-ce2a6d072ae4&v=8a7da79518fa2163) - ![Confluent](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=9b6dad85-8048-48b3-ae76-e1638337c89d&v=716ac0a1ce378c13) - ![Axos Bank](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=46da79a9-28e3-4fb1-a618-83ec3f1cfe97&v=cdcf0ae5b36feaa0) - ![Ethos](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=0e1feb5f-d41d-481c-ad56-0d44a3886b74&v=22d35160b2f19e10) - ![Zscaler](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=29b16f8c-44ab-4419-ba8f-f33580b80a27&v=a511dc063c2deed5) - ![Meta](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=8d0d29fd-f80d-42f8-a118-18912f63722d&v=f7dbbcd0de786bda) - ![Nestlé Purina Petcare](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=dbe8a986-4437-4db3-90ef-f11511118b13&v=d7e7849555eafaf3) - ![BabyBjörn](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=d149f5b0-0248-4cc1-9eea-55741e1c05d8&v=378f1accbc5d9a23) - ![Adyen](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=423ab72c-17df-4736-92f5-55581bd1613a&v=11c67e1937a4d1ff) - ![Autodesk](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=c8b0488f-2348-4612-bfc3-a2b7b8563fd1&v=78dca91e8d3882ec) - ![Stack Overflow](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=7b850ee4-c3dc-4abf-919e-97dbabb7ac37&v=c430a99c977baeda) - ![Vodafone](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=796b6477-f0f5-43da-9862-20bbe8027508&v=93a7af34f37babaf) - ![Danone](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=b8bfc63e-d623-4bfd-83b8-ae79fff17c06&v=a0a9a96500e24f59) - ![Finish Line](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=29dab591-7290-4f4a-ad29-7a2baf4e239c&v=a65b89bef7bca8d3) - ![University of Wisconsin Health](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=a66d18fa-e3de-4991-a3f5-ce2a6d072ae4&v=8a7da79518fa2163) - ![Confluent](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=9b6dad85-8048-48b3-ae76-e1638337c89d&v=716ac0a1ce378c13) - ![Axos Bank](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=46da79a9-28e3-4fb1-a618-83ec3f1cfe97&v=cdcf0ae5b36feaa0) - ![Ethos](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=0e1feb5f-d41d-481c-ad56-0d44a3886b74&v=22d35160b2f19e10) - ![Zscaler](https://compliance-buddy-gateway.netlify.app/api/trust/logo?id=29b16f8c-44ab-4419-ba8f-f33580b80a27&v=a511dc063c2deed5) ## Compliance programs - ### SOC 2 Type II Independent audit of our security, availability, and confidentiality controls. Held since 2026-09-30 - ### ISO/IEC 27001 Certified information security management system. Held since 2026-09-30 - ### ISO/IEC 27018:2019 Certified controls for protecting personal data in public cloud services. - ### Penetration Test Regular third-party penetration testing of our platform. Held since 2026-09-30 - ### PCI DSS Compliance with the Payment Card Industry Data Security Standard. Held since 2026-09-30 - ### PCI DSS v4.0.0 Compliance with version 4.0.0 of the Payment Card Industry Data Security Standard. Held since 2026-09-30 - ### GDPR Aligned with the EU General Data Protection Regulation. - ### CCPA Aligned with the California Consumer Privacy Act. - ### HIPAA Safeguards for handling protected health information. - ### DORA Aligned with the EU Digital Operational Resilience Act. - ### Data Processing Addendum GDPR-aligned data processing terms available to customers. Held since 2026-09-30 - ### EU-US Data Privacy Framework Certified participant in the EU-US Data Privacy Framework. - ### Swiss-US Data Privacy Framework Certified participant in the Swiss-US Data Privacy Framework. - ### VPAT Accessibility conformance reported in a Voluntary Product Accessibility Template. ## Document inventory Security and compliance reports, policies, and agreements. Document Access - Data Processing Agreement DPA [Download](https://compliance-buddy-gateway.netlify.app/api/trust/doc?id=netlify-data-processing-agreement-dpa-20260609-2-pdf) - Incident Response Business Continuity and Disaster Recovery Testing Report [Access on request](https://app.netlify.com/user/trust-center#content) - Security and Architecture Overview [Access on request](https://app.netlify.com/user/trust-center#content) - SOC 2 2026 [Access on request](https://app.netlify.com/user/trust-center#content) - Threat Intelligence Policy [Access on request](https://app.netlify.com/user/trust-center#content) - Accessibility Statement [Access on request](https://app.netlify.com/user/trust-center#content) - Penetration Test Executive Summary [Access on request](https://app.netlify.com/user/trust-center#content) - BAA for Business Associates [Download](https://compliance-buddy-gateway.netlify.app/api/trust/doc?id=netlify-baa-for-business-associates-20260408-1-pdf) - AOC PCI DSS Audit 2026 [Access on request](https://app.netlify.com/user/trust-center#content) - Business Continuity Disaster Recovery Policy [Access on request](https://app.netlify.com/user/trust-center#content) - Incident Response Policy [Access on request](https://app.netlify.com/user/trust-center#content) - HIPAA Security Rule at Netlify [Access on request](https://app.netlify.com/user/trust-center#content) - Customer Penetration Testing Policy [Access on request](https://app.netlify.com/user/trust-center#content) - Data Classification Policy [Access on request](https://app.netlify.com/user/trust-center#content) - DORA Addendum [Access on request](https://app.netlify.com/user/trust-center#content) - ePHI Information Access Management [Access on request](https://app.netlify.com/user/trust-center#content) - HIPAA Security and Breach Audit 2026 [Access on request](https://app.netlify.com/user/trust-center#content) - Fraud Risk Management Policy [Access on request](https://app.netlify.com/user/trust-center#content) - Information Security Management System (ISMS) [Access on request](https://app.netlify.com/user/trust-center#content) - Information Security Policy [Access on request](https://app.netlify.com/user/trust-center#content) - ISO 27001 27018 Certificate Award 2026 [Download](https://compliance-buddy-gateway.netlify.app/api/trust/doc?id=netlify-iso-27001-27018-certificate-award-20260723-pdf) - ISO 27001 27018 Surveillance Audit Report 2026 [Access on request](https://app.netlify.com/user/trust-center#content) - Operational Risk Management Policy [Access on request](https://app.netlify.com/user/trust-center#content) - PCI 12.5.2 DSS CDE Scoping Assessment [Access on request](https://app.netlify.com/user/trust-center#content) - PCI DSS - SAQ-A 2026 [Access on request](https://app.netlify.com/user/trust-center#content) - PCI DSS SAQ-A Responsibility Matrix [Access on request](https://app.netlify.com/user/trust-center#content) - Secure Development Lifecycle (SDLC) [Access on request](https://app.netlify.com/user/trust-center#content) - Vulnerability and Patch Management Policy [Access on request](https://app.netlify.com/user/trust-center#content) - VPAT [Access on request](https://app.netlify.com/user/trust-center#content) - Architecting a HIPAA-Compliant Composable Site on Netlify [Access on request](https://app.netlify.com/user/trust-center#content) - Evidence of Coverage COI [Access on request](https://app.netlify.com/user/trust-center#content) No documents match your search. ## Subprocessors The third parties that process customer data on our behalf. [Download CSV](https://compliance-buddy-gateway.netlify.app/api/trust/subprocessors.csv?target=marketing) [Download PDF](https://compliance-buddy-gateway.netlify.app/api/trust/subprocessors.pdf?target=marketing) [Subscribe to RSS](/trust-center/subprocessors.xml) Subprocessor Registration # Purpose Category Locations Altinity, Inc / Clickhouse SP-20210331.1 Managed ClickHouse database services, including hosting, operation, and support of ClickHouse analytical databases. Database US Amazon Web Services (AWS) SP-20160510.1 Cloud infrastructure provider supplying AWS compute, storage, networking, and managed services used to host and run Netlify infrastructure. Hosting, compute, storage, backup US Amplitude, Inc. SP-20211101.1 Product analytics platform used to track user behavior, measure feature adoption, and analyze product engagement. Analytics US Anthropic SP-20240414.1 Provider of large language models (Claude) and related AI services, accessed via API for AI-enabled features and workflows. AI Services US Automattic, Inc. (Akismet) SP-20181214.1 Automated spam-filtering service (Akismet) used to detect and filter spam in comment, form, and text submissions. Spam Filtering US Axiom SP-20240930.1 Logging, tracing, and monitoring platform used to ingest, store, and query event data for observability and troubleshooting. logging, tracing, and monitoring US Crowdstrike, Inc. (Humio) SP-20190312.1 Log management and observability platform (Humio, now CrowdStrike Falcon LogScale) used for log ingestion, search, and security analytics. Log Analysis US Datadog, Inc. SP-20180312.1 Observability platform providing infrastructure and application monitoring, log management, and security monitoring. Analytics US Dynatrace DevCycle SP-20230306.1 Feature flag and feature management platform used to control feature releases, gradual rollouts, and experimentation. Feature Flagging US Fivetran Inc. SP-20201028.1 Automated data movement platform providing ELT pipelines that replicate data from source systems into the data warehouse. Data Services US Google Cloud Platform GCP / Zencore Group, LLC SP-20160815.1 Google Cloud Platform infrastructure and managed services, with Zencore Group, LLC as the associated Google Cloud partner. Infrastructure Service Provider US Kapa.AI SP-20230417.1 AI assistant trained on developer documentation that answers technical questions for developers and support teams. AI Servces US Name.com SP-20180619.1 Domain name registrar used to register and manage company domain names. Domain Registration US Neon SP-20250422.1 Third-party provider for a Netlify Extension that lets users create a Postgres database on Netlify's account with Neon and later claim it for production use. Database Hosting US NS1 SP-20160229.1 Managed DNS and traffic management service providing authoritative DNS and traffic steering. Managed authoritative DNS Global, US OpenAI SP-20240304.1 Provider of large language models (GPT family) and related AI services, accessed via API. AI Servces US OpenRouter SP-20260806.1 AI services: model routing platform providing unified API access to large language models from multiple providers. AI Services US Orb SP-20240601.1 Usage-based billing platform used to meter usage, calculate charges, and generate invoices for usage-based pricing. Billing and invoicing US Salesforce, Inc. SP-20200419.1 Customer relationship management (CRM) platform used to manage accounts, contacts, opportunities, and the sales pipeline. CRM US Segment SP-20191031.1 Customer data platform used to collect, route, and deliver analytics event data to downstream tools. Customer data platform US SendGrid SP-20250829.1 Cloud-based email delivery service used to send transactional and marketing emails. Email Services US Sigma Computing, Inc. SP-20230127.1 Cloud analytics and business intelligence platform used to explore and visualize data from the cloud data warehouse. Business Intelligence US Smartbear Software, Inc / Bugsnag SP-20220806.1 Software quality platform providing testing and API quality tools (SmartBear) and application error monitoring (Bugsnag). Error Reporting US Snowflake, Inc. SP-20210406.1 Cloud data warehouse used to store, process, and analyze company data. Warehousing US Stripe SP-20240808.1 Payment processing platform used to process customer credit card payments. Payment Processing US WorkOS, Inc. SP-20220810.1 Enterprise authentication platform providing SSO, directory sync, and related enterprise identity integrations. Identity and Access Management US No subprocessors match your search. ## Get access to our security documentation Sign in to the Netlify app to view and download our full set of security and compliance documents. [Get access](https://app.netlify.com/user/trust-center#content)