Yubico · Trust Center

Yubico Trust Center

Trust center

Yubico maintains a public trust center documenting SOC 2 Type 2, FIPS 140-3, FIDO2, FIDO U2F, and NIST SP 800-63-3 AAL3 compliance.

CompanyEnterpriseAuthenticationSecurityIdentityHardware SecurityFIDO2WebAuthnOne-Time Password
Trust center: https://www.yubico.com/solutions/cybersecurity-compliance/

Certifications & Compliance

SOC 2 Type 2FIPS 140-3FIDO2FIDO U2FNIST SP 800-63-3 AAL3

Source

Trust Center

Raw ↑
generated: '2026-07-21'
method: searched
probe: false
source: >-
  https://www.yubico.com/blog/yubienterprise-services-reaches-a-new-milestone-with-soc-2-type-2-attestation-report/ +
  https://www.yubico.com/solutions/cybersecurity-compliance/
url: https://www.yubico.com/solutions/cybersecurity-compliance/
certifications:
  - SOC 2 Type 2
  - FIPS 140-3
  - FIDO2
  - FIDO U2F
  - NIST SP 800-63-3 AAL3
evidence:
  - source: https://www.yubico.com/blog/yubienterprise-services-reaches-a-new-milestone-with-soc-2-type-2-attestation-report/
    keywords: [soc 2 type 2, schellman, trust services criteria]
  - source: https://www.yubico.com/authentication-standards/fido2/
    keywords: [fido2, fido u2f, fips 140-3, aal3]

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/yubico-trust-center"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.