Apple Safari Trust Center

generated: '2026-09-07'
method: searched
source: https://support.apple.com/guide/certifications/welcome/web
specification: API Commons Trust Center
specificationVersion: '0.1'
provider: Apple Safari
providerId: apple-safari
description: >-
  Apple publishes a standing Platform Certifications guide rather than a vendor-style
  trust portal with a document request form. It names the certification programmes Apple
  holds across hardware, operating systems and internet services — including Apple Pay,
  the paid surface reachable from Safari — and is public with no sign-in.
trust_center:
  url: https://support.apple.com/guide/certifications/welcome/web
  name: Apple Platform Certifications
  gated: false
  probed:
    - url: https://support.apple.com/guide/certifications/welcome/web
      status: 200
      checked: '2026-09-07'
certifications:
  - name: Common Criteria (CC)
    scope: Apple hardware, operating systems and services
    evidence: https://support.apple.com/guide/certifications/welcome/web
    detail: Apple publishes Common Criteria certification status information.
  - name: Cryptographic module validation (CMVP / FIPS)
    scope: Apple cryptographic modules
    evidence: https://support.apple.com/guide/certifications/welcome/web
    detail: Apple publishes cryptographic module validation status information.
  - name: SOC 3
    scope: Apple Private Cloud Compute
    evidence: https://support.apple.com/guide/certifications/welcome/web
    detail: Apple publishes Private Cloud Compute SOC 3 audit reports.
coverage_areas:
  - Hardware security — Secure Enclave Processor and Apple T2 Security Chip
  - Operating systems — iOS, iPadOS, macOS, tvOS, visionOS, watchOS
  - Services — Apple internet services and Apple Pay
  - National regulations security certifications
  - Security Compliance Projects for macOS, iOS, iPadOS and visionOS
statement: >-
  "The certifications cover security controls used in the data center environment and
  controls that are part of the security life cycle" for Apple services.
related:
  security_policy: https://webkit.org/security-policy/
  bounty: https://security.apple.com/bounty/guidelines/
  security_txt: well-known/apple-safari-security.txt
  vulnerability_disclosure: security/apple-safari-vulnerability-disclosure.yml
note: >-
  ISO 27001/27017/27018 and SOC 2 were NOT found named on the pages probed for this
  record and are deliberately not asserted here. Only the programmes Apple names on the
  certifications guide are listed.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com
    url: https://apievangelist.com