Red Canary · Trust Center

Red Canary Trust Center

Trust center

Red Canary maintains a public trust center documenting SOC 2 Type II, ISO 27001:2013, ISO 27701, JOSCAR, EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework, and Swiss-U.S. Data Privacy Framework compliance.

CompanySecurityCybersecurityManaged Detection and ResponseThreat DetectionThreat IntelligenceEndpoint SecurityIncident ResponseSecurity OperationsAutomation
Trust center:

Certifications & Compliance

SOC 2 Type IIISO 27001:2013ISO 27701JOSCAREU-U.S. Data Privacy FrameworkUK Extension to the EU-U.S. Data Privacy FrameworkSwiss-U.S. Data Privacy Framework

Source

Trust Center

red-canary-trust-center.yml Raw ↑ 
generated: '2026-08-05'
method: searched
probe: true
source: https://redcanary.com/trust-center/
urls:
- url: https://redcanary.com/trust-center/
  kind: marketing trust center page
- url: https://security.redcanary.com/
  kind: Conveyor-hosted trust portal (Red Canary Trust Center | Powered by Conveyor)
  dataroom: https://app.conveyor.com/datarooms/c2853f75-461c-4814-9b4c-5f08fd85b6de
contact: grc@redcanary.com
certifications:
- SOC 2 Type II
- ISO 27001:2013
- ISO 27701
- JOSCAR
- EU-U.S. Data Privacy Framework
- UK Extension to the EU-U.S. Data Privacy Framework
- Swiss-U.S. Data Privacy Framework
privacy_regimes:
- GDPR
- UK GDPR
- CCPA / CPRA
- PIPEDA
- FDPA
privacy:
  dpa: >-
    Data Protection Addendum available, documenting compliance with GDPR, UK GDPR,
    CCPA, CPRA, PIPEDA, FDPA and applicable Privacy Acts.
  privacy_policy: https://redcanary.com/privacy-policy/
subprocessors:
  public: false
  note: Subprocessor list is available to customers and prospects under NDA by request to grc@redcanary.com.
vulnerability_disclosure: https://redcanary.com/responsible-disclosure/
status_page: https://status.redcanary.com/
customer_compliance_support:
  url: https://docs.redcanary.com/docs/supported-standards-and-frameworks
  note: >-
    Control-family mappings showing how Red Canary monitoring supports CUSTOMER
    obligations under ISO 27001:2013, SOC, FedRAMP, PCI DSS, BSI C5, HIPAA,
    NIST 800-171 and CMMC. These are frameworks Red Canary helps customers satisfy —
    they are NOT certifications Red Canary itself holds, and must not be read as such.
x-false-credit-guard: >-
  The automated probe (0-working/probe-security-programs.py) first recorded HIPAA,
  FedRAMP, ISO 27017, ISO 27018 and CSA STAR from https://security.redcanary.com/.
  Those strings are real on that page but belong to OTHER vendors' tiles rendered in
  the Conveyor portal's directory carousel (Slack, Zendesk, Splunk, AWS). Red Canary's
  own record in the page's VENDOR_REPORT payload lists exactly:
  ["iso-27001","iso-27701","soc2-type-2","ccpa","eu-us-data-privacy","gdpr",
  "swiss-us-dpf","uk-extension-to-eu-us-dpf"], which matches the marketing trust center
  page. The keyword-derived list was discarded and this file was restored to the
  searched values. Do not re-run the probe over this file without re-verifying.
evidence:
- source: https://redcanary.com/trust-center/
  http_status: 200
  keywords:
  - soc 2 type ii
  - iso 27001:2013
  - iso 27701
  - joscar
  - data privacy framework
- source: https://security.redcanary.com/
  http_status: 200
  extracted: window.VENDOR_REPORT._embedded.canonical_asset.certifications
  value:
  - iso-27001
  - iso-27701
  - soc2-type-2
  - ccpa
  - eu-us-data-privacy
  - gdpr
  - swiss-us-dpf
  - uk-extension-to-eu-us-dpf
- source: https://redcanary.com/security/
  http_status: 200
  note: 301 to https://redcanary.com/trust-center/
- source: https://trust.redcanary.com/
  http_status: 0
  note: does not resolve
x-evidence:
  fetched: '2026-08-05'

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/red-canary-trust-center"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.