Snapshot 161213
Normalized text
Scripts and page chrome removed; this is what change detection compares.
•Trust Center Featured Product Overview Deel is the only global-first people platform designed to streamline hiring, paying, managing, and developing an international workforce—efficiently and compliantly. Tens of thousands of companies have expanded globally, with Deel as a trusted partner that offers unmatched speed, flexibility, and confidence in 150+ countries. It’s your forever people platform. Compliance GDPR ISO 27001 CCPA ISO 27701 SOC 1 SOC 2 CSA STAR Level 1 EU-US DPF EU AI Act ISO 42001 Documents Select all ISO27001 Certificate 2026 Copy link Preview Download ISO27701 Certificate 2026PDF Copy link Preview Download ISO27001 & ISO27701 Audit Confirmation Letter Copy link Preview Download ISO 42001 Certificate Copy link Request Access Request Access Deel Platform Web API Application Security Assessment Summary Letter 2026 Copy link Request Access Request Access Deel Mobile Application Security Assessment Summary Letter Copy link Request Access Request Access Show More Get access to the Trust Center for more security details • Unlock private documents • Access sensitive information • Reclaim access anytime Security Posture Product security SSO options Role-Based Access Control (RBAC) Vulnerability and patch management Data security Encryption-in-transit Encryption-at-rest Data classification policy AI Governance Deel ATS Bias Audit Deel's ATS AI Governance Documentation Deel's ATS - CV-to-Job Matching Explainability Documentation Infrastructure Resilient architecture Environment separation Status monitoring Network security IPS/IDS CSPM/DSPM Network segregation Access control Access control policy Periodic review of user access rights Least privilege and need-to-know principles Software Development Life Cycle (SDLC) Secure development requirements Secure development policy Security tools Human resources security Security training Acceptable use policy Disciplinary process Risk management Risk assessment Cyber insurance Vendor risk management program Event logging SIEM SOC Log centralization and retention Log review Mobile devices Mobile Device Management Solution (MDM) Hard disk encryption Screen lock timeout Business continuity and DR Business continuity plan Business continuity exercises Redundancies and failover capacities Incident management Incident response plan Reporting information security events Incident response plan testing Policies Alignment with industry security and privacy standards Annual review Management approval Governance and responsibilities Segregation of duties Dedicated security team Senior management involvement in InfoSec Privacy Data Processing Agreement (DPA) Sub-processor List Privacy policy Legal Cyber insurance Service-level agreement Terms of Service Corporate social responsibility Sustainability policy Equal employment opportunity Labor and human rights Reports Pentest report SOC 1 Type II SOC 2 Type II Security grades Bitsight security rating - Advanced ImmuniWeb A Qualys SSL Labs A+ Self assessment CAIQ Akai by Deel Akai - AI Governance Documentation Akai Penetration Test Report Updates Subscribe Oct 26, 2026, 3:58 pm Security Advisory: PHP2Shell (CVE-2026-109618, CVE-2026-109619) and Brotli / "HTTP2Shell" (CVE-2026-111497) Vulnerabilities Published: October 26, 2026 · Last updated: October 26, 2026 Status: Deel is protected — no customer action required, no service impact Summary On October 21, 2026, critical remote code execution vulnerabilities were disclosed in the PHP runtime (CVE-2026-109618, CVE-2026-109619, "PHP2Shell") and in the Brotli decompression library bundled with Node.js and other runtimes (CVE-2026-111497, also referred to as "Node2Shell" / "HTTP2Shell"). Deel's assessment Deel's Security team has completed its assessment of the Deel platform, hosted infrastructure, and corporate systems, including those of Deel's subsidiaries and acquired companies. Deel has no assets that are exploitable through these vulnerabilities: - PHP (CVE-2026-109618, CVE-2026-109619): The Deel platform does not run the PHP runtime. A small number of ancillary properties operated by subsidiaries that used PHP were either ... Show more © 2026 Skypher, Inc. All rights reserved. Powered by