Lightning Web Components Trust Center

Trust center

Trust and compliance surface applicable to Lightning Web Components. LWC OSS is a library and operates no service of its own, so it holds no certifications directly. The operative trust surface for components running on the Salesforce Platform is the parent brand's, recorded here with that scope stated explicitly rather than claimed as an LWC certification.

Lightning Web Components maintains a public trust center documenting PCI DSS and IRAP compliance.

FrontendJavaScriptLightning Web ComponentsSalesforceWeb ComponentsCustom ElementsShadow DOMOpen-SourceUI FrameworkComponent Library

Trust center:

Certifications & Compliance

PCI DSSIRAP

Source

Trust Center

generated: '2026-08-27'
method: searched
source: https://trust.salesforce.com/
provider: Lightning Web Components
providerId: lightning-web-components
description: >-
  Trust and compliance surface applicable to Lightning Web Components. LWC OSS is a library and
  operates no service of its own, so it holds no certifications directly. The operative trust
  surface for components running on the Salesforce Platform is the parent brand's, recorded here
  with that scope stated explicitly rather than claimed as an LWC certification.
scope: parent-brand
parent: Salesforce
trust_center:
  url: https://trust.salesforce.com/
  status: 200
  status_page: https://status.salesforce.com/
  status_page_status: 200
compliance_portal:
  url: https://compliance.salesforce.com/
  status: 200
  documents_url: https://compliance.salesforce.com/en/documents
  documents_status: 200
  statement: '"Salesforce maintains a comprehensive set of compliance certifications and attestations."'
  document_count_reported: 505
certifications:
  - name: PCI DSS
    evidence: PCI ASV Network Scan documents listed across Hyperforce regions and first-party infrastructure at https://compliance.salesforce.com/en/documents
  - name: IRAP
    evidence: ACSC Essential 8 report (IRAP assessment) listed at https://compliance.salesforce.com/en/documents
completeness_note: >-
  The compliance document library reports 505 entries and paginates ten at a time; only the first
  page was read in this pass. The two certifications above are the ones actually observed. SOC,
  ISO 27001 and FedRAMP were NOT enumerated here and are deliberately not asserted — an honest
  partial reading rather than a guessed list.
lwc_specific:
  certifications: []
  note: >-
    The Lightning Web Components open-source project itself publishes no certification, audit
    report or trust page. Its security posture is expressed as a minimal-runtime-dependency policy
    plus the SECURITY.md reporting channel — see
    security/lightning-web-components-vulnerability-disclosure.yml.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/lightning-web-components-trust-center"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.