SOCRadar

SOCRadar

Trust Center

SOCRadar is an Extended Threat Intelligence (XTI) company.

Our cloud platform brings Cyber Threat Intelligence, External Attack Surface Management, Digital Risk and Brand Protection, Dark Web Monitoring and Supply Chain Intelligence together in a single view for customers across the Americas, EMEA and APAC.

Customers trust us with sensitive information about their digital assets, exposures and potential compromises, so our own security posture is part of the product.

SOCRadar operates an ISO/IEC 27001:2022 certified Information Security Management System, holds SOC 2 Type I and Type II reports covering all five Trust Services Criteria, is listed on the CSA STAR Registry for both cloud security and AI, and runs its privacy program in line with GDPR and CCPA.

Use this Trust Center to review our certifications, security controls and subprocessors, and to request the reports and policies you need for your vendor assessment.

Confidential documents are shared under NDA.

For security or privacy questions, contact [email protected].

Privacy PolicyContact us

Compliances

  • CCPA
    Compliant
  • GDPR
    GDPR
    Compliant
  • CSA STAR Level 1 (Valid-AI-ted)
    CSA STAR Level 1 (Valid-AI-ted)
    Compliant
  • SOC 2
    SOC 2
    Compliant

Controls

Details
Control Environment
  • Security awareness training implemented
  • Compliance with policies, rules and standards for information security
  • Code of Conduct acknowledged by contractors
  • Board meetings conducted
  • Security policies established and reviewed
  • Employee background checks performed
  • +3 more
Communication and Information
  • System changes communicated
  • Security policies established and reviewed
  • System changes externally communicated
  • Code of Conduct acknowledged by employees and enforced
  • Third-party agreements established
Risk Assessment
  • Infrastructure performance monitored
  • Compliance with policies, rules and standards for information security
  • Risk assessment objectives specified
  • Annual risk assessment performed annually
  • Risk management program established
  • Risks assessments performed
  • Change management procedures enforced
Monitoring Activities
  • Nonconformity and corrective action
  • Board oversight briefings conducted
Control Activities
  • Documentation change control
  • Operational system checks
  • Compliance with policies, rules and standards for information security
  • Risk management program established
  • Development lifecycle established
  • Security policies established and reviewed

Resources

Details
ISO/IEC 27001:2022 Certificate 1
Resource
Sub-Processor List (Sep 2026) 1
Resource
Security Overview (Sep 2026) 1
Resource
+9 more

Subprocessors

Details
Vitally
Customer success platform
Zendesk
Customer support ticketing
HubSpot
Customer relationship management (CRM) for customer and prospect contact data
Google Cloud Platform
Google Cloud Platform
Cloud hosting of the SOCRadar platform and customer data (EU region: Netherlands; US region for US-hosted customers)

FAQs

Details

Updates

Details
  1. Security

    CSA STAR Level 1 Valid-AI-ted

    Our CSA STAR Level 1 self-assessment (CAIQ v4.0.3, Cloud Controls Matrix v4) has passed CSA's Valid-AI-ted assessment with a score of 92.9%. This is SOCRadar's third badge from the Cloud Security Alliance, alongside CSA STAR Level 1 for cloud security and CSA STAR for AI. Valid-AI-ted is CSA's independent, AI-driven review of CAIQ answers, which checks each response for completeness and consistency against the control requirements. The validation is current until September 2027, and the STAR Registry listing is being updated with the Valid-AI-ted badge.

    Visit website
  2. Security

    Cyber Essentials and Cyber Essentials Plus in progress

    SOCRadar is working toward UK Cyber Essentials and Cyber Essentials Plus certification. Cyber Essentials is the UK government-backed scheme covering core technical controls, and Cyber Essentials Plus adds independent, hands-on technical verification. We will post an update here when certification is achieved.

  3. Security

    SOC 2 renewal in progress

    Our 2026 SOC 2 Type I and Type II audits are underway. The current Type II report (Dec 1, 2024 to Nov 30, 2025) remains available under NDA, and the new reports will be published here once issued.

  4. Security

    CSA STAR for AI listing

    SOCRadar is listed on the Cloud Security Alliance STAR Registry for STAR for AI (Level 1), validating the governance, security and responsible-AI controls behind our Agentic Threat Intelligence and XTI AI Engine, including bias mitigation and human-in-the-loop oversight.

    Visit website
  5. Privacy

    Privacy program aligned to GDPR and CCPA

    Our privacy program follows GDPR and CCPA requirements: lawful basis mapping, notice at collection, and support for access, rectification, deletion, restriction and objection requests. Privacy questions can be sent to our Data Protection Officer at [email protected].

    Visit website