Vorlon Trust Center

generated: '2026-07-21'
method: searched
probe: false
url: https://vorlon.io/trust
certifications: [SOC 2 Type II]
description: >-
  Vorlon's trust page presents its security and compliance posture: SOC 2
  Type II certification, data-security controls protecting customer data
  against unauthorized access, anomaly and incident detection across the
  ecosystem, and system-recovery procedures. A compliance-report request form
  is offered for report access. The automated trust-center probe did not
  record this page because it sits at vorlon.io/trust rather than a
  trust.<domain> subdomain meeting the probe's keyword threshold - this is the
  searched, human-verified fill. The site footer (including the
  security-compliance page) also displays SOC 2 Type II, AWS, and FS-ISAC
  Affiliate badges.
report_access:
  soc_reports: SOC 2 Type II report available via compliance-report request form on the trust page.
docs:
  - https://vorlon.io/trust
  - https://vorlon.io/security-compliance
evidence:
  - {source: 'https://vorlon.io/trust', keywords: [soc 2 type ii, data security controls, compliance report]}
  - {source: 'https://vorlon.io/security-compliance', keywords: [soc 2 type ii, compliance automation, fs-isac affiliate]}
notes: >-
  No public vulnerability-disclosure policy, security.txt, or bug-bounty
  program was found (probe + manual checks of /security,
  /.well-known/security.txt, HackerOne/Bugcrowd). The vorlon.io CAA DNS
  record does carry an iodef contact of security@vorlon.io
  (certificate-incident reporting), captured in vorlon-domain-security.yml.