Red Canary · Trust Center

Red Canary Trust Center

Trust center

Red Canary maintains a public trust center documenting SOC 2 Type II, ISO 27001:2013, ISO 27701, JOSCAR, EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework, and Swiss-U.S. Data Privacy Framework compliance.

CompanySecurityCybersecurityManaged Detection and ResponseThreat DetectionThreat IntelligenceEndpoint SecurityIncident ResponseSecurity OperationsAutomation

Trust center:

Certifications & Compliance

SOC 2 Type IIISO 27001:2013ISO 27701JOSCAREU-U.S. Data Privacy FrameworkUK Extension to the EU-U.S. Data Privacy FrameworkSwiss-U.S. Data Privacy Framework

Source

Trust Center

generated: '2026-08-05'
method: searched
probe: true
source: https://redcanary.com/trust-center/
urls:
- url: https://redcanary.com/trust-center/
  kind: marketing trust center page
- url: https://security.redcanary.com/
  kind: Conveyor-hosted trust portal (Red Canary Trust Center | Powered by Conveyor)
  dataroom: https://app.conveyor.com/datarooms/c2853f75-461c-4814-9b4c-5f08fd85b6de
contact: grc@redcanary.com
certifications:
- SOC 2 Type II
- ISO 27001:2013
- ISO 27701
- JOSCAR
- EU-U.S. Data Privacy Framework
- UK Extension to the EU-U.S. Data Privacy Framework
- Swiss-U.S. Data Privacy Framework
privacy_regimes:
- GDPR
- UK GDPR
- CCPA / CPRA
- PIPEDA
- FDPA
privacy:
  dpa: >-
    Data Protection Addendum available, documenting compliance with GDPR, UK GDPR,
    CCPA, CPRA, PIPEDA, FDPA and applicable Privacy Acts.
  privacy_policy: https://redcanary.com/privacy-policy/
subprocessors:
  public: false
  note: Subprocessor list is available to customers and prospects under NDA by request to grc@redcanary.com.
vulnerability_disclosure: https://redcanary.com/responsible-disclosure/
status_page: https://status.redcanary.com/
customer_compliance_support:
  url: https://docs.redcanary.com/docs/supported-standards-and-frameworks
  note: >-
    Control-family mappings showing how Red Canary monitoring supports CUSTOMER
    obligations under ISO 27001:2013, SOC, FedRAMP, PCI DSS, BSI C5, HIPAA,
    NIST 800-171 and CMMC. These are frameworks Red Canary helps customers satisfy —
    they are NOT certifications Red Canary itself holds, and must not be read as such.
x-false-credit-guard: >-
  The automated probe (0-working/probe-security-programs.py) first recorded HIPAA,
  FedRAMP, ISO 27017, ISO 27018 and CSA STAR from https://security.redcanary.com/.
  Those strings are real on that page but belong to OTHER vendors' tiles rendered in
  the Conveyor portal's directory carousel (Slack, Zendesk, Splunk, AWS). Red Canary's
  own record in the page's VENDOR_REPORT payload lists exactly:
  ["iso-27001","iso-27701","soc2-type-2","ccpa","eu-us-data-privacy","gdpr",
  "swiss-us-dpf","uk-extension-to-eu-us-dpf"], which matches the marketing trust center
  page. The keyword-derived list was discarded and this file was restored to the
  searched values. Do not re-run the probe over this file without re-verifying.
evidence:
- source: https://redcanary.com/trust-center/
  http_status: 200
  keywords:
  - soc 2 type ii
  - iso 27001:2013
  - iso 27701
  - joscar
  - data privacy framework
- source: https://security.redcanary.com/
  http_status: 200
  extracted: window.VENDOR_REPORT._embedded.canonical_asset.certifications
  value:
  - iso-27001
  - iso-27701
  - soc2-type-2
  - ccpa
  - eu-us-data-privacy
  - gdpr
  - swiss-us-dpf
  - uk-extension-to-eu-us-dpf
- source: https://redcanary.com/security/
  http_status: 200
  note: 301 to https://redcanary.com/trust-center/
- source: https://trust.redcanary.com/
  http_status: 0
  note: does not resolve
x-evidence:
  fetched: '2026-08-05'