Snapshot 16930
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to content Company CompanyManagement teamCareersNewsLocationsPartners BlogCustomer Portal Trust Tricentis Security Tricentis strives to implement and continuously execute a proactive strategy for security and compliance. As a leader in test automation for cloud and enterprise applications, we are dedicated to providing peace of mind to our customers by applying policies and procedures designed to keep our data, platform, and products secure. Although no security program is 100% immune to compromise, we utilize security controls that exceed the standards for the environments in which we operate. Compliance Our security program is designed to mitigate risk using a combination of industry best practices and published standards: SOC 2 Type 2 Tricentis conducts a SOC 2 Type 2 audit on an annual basis to test the design and operating effectiveness of the controls relevant to Security, Availability and Confidentiality. A SOC 2 audit is performed to provide our customers with the assurance that we have the controls in place to protect their information and data through secure systems. Tricentis currently undergoes SOC2 Type 2 for NeoLoad, qTest, SeaLights, Testim, Tosca Cloud, Tricentis Test Management for JIRA, Vera, and VisionAI. Our Trust Center provides customers with access to our ISO 27001, ISO 27701, ISO 9001, and ISO 42001 certificates, SOC 2 Type 2 report, and a wide range of additional security and compliance documentation. ISO/IEC 27001 Tricentis’ Information Security Management System (ISMS) is certified through the ISO 27001: 2022 standard annually, over a 3-year certification cycle. ISO 27001 tests against the requirements for the establishment, implementation, maintenance and continual improvement of the ISMS. An ISO 27001 audit is performed to demonstrate to our stakeholders that information security is taken seriously. In-scope products are LiveCompare, NeoLoad, qTest, SeaLights, Testim, Tosca On Prem, Tosca Cloud, Tricentis Test Management for JIRA, Vera, and VisionAI. An ISO 27001 certificate can be downloaded from the Tricentis Security Center. ISO 27701 Tricentis’ Privacy Information Management System (PIMS) is certified through the ISO 27701: 2019 standard annually, over a 3-year certification cycle. ISO 27701 tests against the requirements for the establishment, implementation, maintenance and continual improvement of the PIMS. An ISO 27701 audit is performed to demonstrate to our stakeholders that privacy is taken seriously. In-scope products are LiveCompare, NeoLoad, qTest, SeaLights, Testim, Tosca On Prem, Tosca Cloud, Tricentis Test Management for JIRA, Vera, and VisionAI. An ISO 27701 certificate can be downloaded from the Tricentis Security Center. ISO 9001 Tricentis’ Quality Management System (QMS) is certified through the ISO 9001 standard annually, over a 3-year certification cycle. ISO 9001 tests against the requirements for the establishment, implementation, maintenance and continual improvement of the QMS. An ISO 9001 audit is performed to demonstrate to our stakeholders that quality management is taken seriously. In-scope products are LiveCompare, NeoLoad, qTest, SeaLights, Testim, Tosca On Prem, Tosca Cloud, Tricentis Test Management for JIRA, Vera, and VisionAI. An ISO 9001 certificate can be downloaded from the Tricentis Security Center. ISO/IEC 42001 Tricentis’s Artificial Intelligence Management System (AIMS) is certified against the ISO/IEC 42001 standard annually, over a 3-year certification cycle. ISO/IEC 42001 specifies requirements for the establishment, implementation, maintenance and continual improvement of an AIMS. An ISO/IEC 42001 audit is performed to demonstrate to our stakeholders that the responsible development and use of artificial intelligence, including the management of associated risks and opportunities, are taken seriously. The scope of our certification covers the AIMS supporting research and development for commercially released versions of Tricentis AI Solutions (including Agentic Test Automation, Agentic Test Creation and AI Workspace), qTest Copilot, Testim Copilot, and VisionAI, including professional services and support for these products. Pillars Tricentis’ security program delivers against well-established pillars of trust. Security Tricentis’ testing products are created to operate securely and efficiently while protecting against unauthorized access, unauthorized disclosure, or damage to systems that could affect other controls. Availability We ensure you can always access your data and that our systems maintain operational uptime and performance to meet your business objectives and service level agreements. Confidentiality It is our top priority to protect your confidential information during collection, processing and disposal. Secure app development Tricentis R&D team practices static and dynamic code analysis, third-party assessments, peer reviews and formal change control. Processing integrity We work diligently to ensure that all data is processed in a predictable manner, free of accidental or unexplained errors. Privacy We only collect your Personally Identifiable Information (PII) with your consent and limit access of that information to previously identified, appropriate parties. Disclosure Tricentis Vulnerability Disclosure Policy Tricentis welcomes feedback from security researchers and our customers to help improve our security. If you believe you have discovered a vulnerability associated with any Tricentis assets, please contact us. By submitting a vulnerability report or participating in this vulnerability disclosure program, you agree to follow the guidelines in this Policy. Read more Get started with Tricentis Get started