Snapshot 13904
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Sitecore Sitecore is a global leader in AI-enabled digital experience software. Its next-generation platform, SitecoreAI, helps brands plan, create, personalize, and deliver content across every channel — websites, apps, social, and beyond. By unifying content management, customer data, and personalization into one intelligent system, it makes marketing faster, smarter, and more connected. At its core are agentic tools and studios that let marketers and developers collaborate with AI responsibly and effectively. Trusted by thousands of global brands and supported by one of the world’s largest digital experience communities, Sitecore helps organizations design experiences for the world beyond the website, with the flexibility of customizable SaaS and the scale of a global ecosystem. trust@sitecore.com Privacy PolicyOpens in new tab Compliance SOC 2 Type II S SOC 1 Type II ISO/IEC 42001:2023 ISO 27001:2022 ISO 27017:2015 ISO 27018:2019 HIPAA I IRAP TISAX PCI DSS - SAQ D FAQ View all Updates View all General Sitecore releases latest SOC1, SOC2, HIPAA, ISO27001, ISO27017, ISO27018 AND NEW! ISO42001 reports and certifications Published July 17, 2026 We are pleased to announce the publication of our latest independent assurance reports and certifications, including SOC 1 Type II, SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, HIPAA, and CSA STAR. These third-party audits and certifications provide customers with independent validation that Sitecore maintains robust security, privacy, availability, and compliance controls across our products, services, and operations. They reflect our ongoing commitment to transparency, accountability, and the protection of customer data. We are also proud to announce our newly achieved ISO/IEC 42001 certification, the world's first international standard for Artificial Intelligence Management Systems (AIMS). As one of the early organizations to obtain this certification, Sitecore is helping establish the benchmark for responsible AI governance. ISO 42001 provides independent assurance that AI is managed through defined governance processes, risk management practices, oversight mechanisms, and controls designed to promote transparency, accountability, safety, and ethical use. For our customers, this certification offers increased confidence that AI capabilities are developed, deployed, and operated within a structured framework that prioritizes trust, responsible innovation, and regulatory readiness. As organizations increasingly adopt AI-powered solutions, ISO 42001 demonstrates Sitecore's commitment to ensuring that AI is governed with the same rigor, discipline, and independent oversight that customers have come to expect from our security and compliance programs. Incident InfoSec Communication – Vercel Security Incident – April 2026 Published April 20, 2026 Date: 20 April 2026 Sitecore is aware of the Vercel security incident.Opens in new tab While Sitecore.com does use Vercel as a hosting provider, we have received the following notification from Vercel: "At this time, we do not have reason to believe that your Vercel credentials or personal data have been compromised." We are taking the appropriate steps as recommended by Vercel and will continue to monitor our environment, take appropriate steps and provide updates as required. Customer Recommendations Vercel is directly notifying customers with impact and next steps; please confirm that you have up-to-date contact informationOpens in new tab with Vercel. Sitecore customers who use Vercel as a hosting provider should follow Vercel’s recommendationsOpens in new tab, including but not limited to rotation of environment variables. If you need assistance, please raise a ticket with our Customer Support team.Opens in new tab For information about managing a Vercel communication, please see Sitecore documentationOpens in new tab Incident Axios NPM Supply Chain Compromise Published April 1, 2026 Update 2 April 2026 Our current assessment is that this issue does not affect SitecoreAI (including XM Cloud), Content Hub or XP. Exposure could arise where a customer chose to install the affected package versions within its own workload or deployment pipeline in SitecoreAI during the relevant time window. Date: 1 April 2026 Sitecore is aware of the recently publicly reported supply chain attack affecting the malicious Axios npm package versions 1.14.1 and 0.30.4. These versions were briefly made available through the public npm registry following compromise of a package maintainer account. Our current assessment is that this issue does not affect SitecoreAI (including XM Cloud). Exposure could arise where a customer chose to install the affected package versions within its own workload or deployment pipeline in SitecoreAI during the relevant time window. As a precaution, Sitecore has taken steps to block known malicious command-and-control communication paths associated with this incident and is implementing additional containment and monitoring measures across the platform. We are advising all customers to confirm that they are not using known compromised package versions. Customers should treat any workloads that included compromised packages as potentially compromised, and take subsequent actions including rotate relevant credentials, keys, regenerate Sitecore ContextIDs, and redeploy workloads from a known clean state in line with published security guidance, including · Wiz BlogOpens in new tab · Regenerate SitecoreAI / XMCloud Context ID variableOpens in new tabs If you need assistance, please raise a ticket with our Customer Support teamOpens in new tab General Inside the Sitecore Cybersecurity Trust Center Published March 6, 2026 By Heather Hinton, Chief Information Security Officer In the MarTech world, we say: if you can't protect at scale, you can't connect at scale. After more than 30 years in computer, information and cybersecurity, I have seen how critical that standard really is. That is the bar we are holding ourselves to, and why we have launched the Cybersecurity Trust Center: a single destination for understanding Sitecore’s security and compliance posture. Sitecore helps organizations design digital experiences that allow marketers to connect the right message with the right audience at the right moment. Modern digital experience runs on vendors, integrations, and AI-driven services. Our customers need clear, current evidence that their vendors and partners, including Sitecore, while operating at speed, are also operating with a security-first discipline and commitment to transparency. Sitecore’s Trust Center provides a clear view of Sitecore’s security posture and supports customer-accessible evidence on demand, eliminating inbox back-and-forth and the risk of outdated attachments. Our controls are clearly documented for all Trust Center visitors. Customers can self‑serve up‑to‑date audit reports and penetration‑test summaries, policy summaries, white papers, and other assets, through a seamless login that recognizes account status. Equally important, during fast‑moving, industry‑wide events such as high‑profile vulnerabilities, customers shouldn’t have to send us spreadsheets and questionnaires. The Trust Center lets us publish real‑time bulletins so teams can rely on a single source of truth and subscribe for updates as situations evolve. That transparency cuts response cycles from days to minutes. The Trust Center centralizes the resources security reviewers, procurement teams, and developers ask for most, including compliance certifications and attestations. You can download up‑to‑date reports and summaries (for example, SOC 2, ISO 27001, ISO 27017, ISO 27018, CSA STAR, PCI DSS, HIPAA, and IRAP) and see exactly what each certification means for your team. We maintain current versions so you always pull the latest evidence. No more version confusion. At our events and in customer conversations, we’ve been clear that security is the foundation of our offering. Marketers fight to win customers; security teams fight to keep them. The Trust Center is where those priorities meet. It brings evidence, context, and clarity together in one place so that our customers, the go‑to‑market teams, have the confidence in Sitecore’s ability to “protect-at-scale" so that they can “connect at scale.” Visit trust.sitecore.com to review our certifications, read our policies, subscribe to updates, and download the artifacts your teams need for reviews and audits. If something’s missing, tell us; we designed the Trust Center to serve you, and transparency means listening as much as it means publishing. Resources View all Compliance Reports SOC 1 Type 2 SOC 2 Type 2 (SitecoreAI, Ordercloud, Search, CDP & Personalize) SOC 2 Type 2 (PDXP) SOC 2 Type 2 + CSA STAR View 1 more Certifications ISO 27001-27017-27018 Certificate ISO 42001 Certificate Sitecore TISAX Certificate SIG 2026 Sitecore SIG Lite - ENTERPRISE PCI AoC Sitecore PCI DSS - PlatformDXP_AoC Sitecore PCI DSS - Storefront by Four51_AoC Bridge Letter Sitecore SOC1 Type2, SOC 2 Type 2 + CSA STAR & HIPAA Bridge Letter Letters of Engagement 2026 Penetration Testing Letter of Engagement Penetration Test Reports Penetration Test 2025 Content Hub Penetration Test 2025 CDP & Personalize Penetration Test 2025 XM Cloud (XMC) Penetration Test 2025 Experience Platform (XP)10.4 View 3 more DR Plan Extracts 2026 DR Plan Extract | Sitecore AI - Agentic Studio 2026 DR Plan Extract | Managed Cloud & Managed Cloud Container 2026 DR Plan Extract | SitecoreAI - Marketplace 2026 DR Plan Extract | SitecoreAI - Connect View 5 more DR Test Extracts 2026 DR Test Extract | Sitecore AI - Agentic Studio 2026 DR Test Extract | CDP & Personalization 2026 DR Test Extract | Managed Cloud & Managed Cloud Container 2026 DR Test Extract | SitecoreAI - Marketplace View 5 more Policy Summary (Extract) Information Security Policy Summary Access Control & Identification and Authentication Policy (Extract) Audit and Accountability Policy (Extract) Artificial Intelligence Policy (Extract) View 9 more