Snapshot 221018
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Overview Welcome to ABBYY's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation. Compliance SOC 2 Type 2 ISO/IEC 27001:2022 ISO/IEC 27001 SoA ISO 9001:2015 FSQS EcoVadis JUL 2026 - Committed CCPA GDPR VPAT DMARC Certified 21 CFR Part 11 CIS Controls 8.1 DORA EU CRA ISO 22301 ISO/IEC 42001:2023 C5 NIST CSF ABBYY is reviewed and trusted by McDonald's Siemens Yum! Brands PepsiCo Volkswagen UK Deloitte Fujifilm Erste Group Vinmar Konica Minolta Documents REPORTSPentest Report REPORTSSOC 2 Report COMPLIANCEEcoVadis JUL 2026 - Committed COMPLIANCEISO 9001:2015 COMPLIANCEISO/IEC 27001 SoA COMPLIANCEISO/IEC 27001:2022 COMPLIANCESOC 2 Type 2 COMPLIANCEVPAT DATA SECURITYData Asset Classification DATA SECURITYInformation Disclosure Protection DATA SECURITYPhysical Security APP SECURITYVulnerability & Patch Management Reports Pentest Report SOC 2 Report Product Security Audit Logging Data Security Multi-Factor Authentication View more Data Security Access Monitoring Data Asset Classification Data Erasure View more App Security Responsible Disclosure Code Analysis Key Management View more AI Governance AI Charter AI Risk Management Policy ESG Code of Conduct Diversity, Equity, and Inclusion Data Privacy Cookies Data Into System Data Out of System Legal Subprocessors Data Processing Agreement Data Subject Requests View more Access Control Access Log Management Bring Your Own Device (BYOD) Data Access View more Infrastructure Status Monitoring Amazon Web Services Azure View more Endpoint Security Anti-Malware Threat Detection Network Security Distributed Denial of Service Protection (Anti-DDoS) DNSSEC Firewall View more Corporate Security Email Protection Employee Training HR Security View more Policies Acceptable Use Policy Access Control Policy Bring Your Own Device (BYOD) Policy View more Risk Management Risk Management Policy BC/DR Business Continuity Plan and Reports Trust Center Updates ABBYY Not Affected by PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619) General October 21, 2026 On October 21, 2026, the PHP project released security updates for two critical vulnerabilities, known as “PHP2Shell”: CVE-2026-109618 and CVE-2026-109619. Both are rated CVSS v4 9.2. They affect PHP versions 5.4 and later on web-facing setups, including PHP-FPM, mod_php, php-cgi, FrankenPHP and LiteSpeed. Under certain conditions, an unauthenticated attacker could use them to execute code remotely. ABBYY’s Security team has reviewed the issue and confirmed that ABBYY products and services are not affected, including ABBYY Vantage, ABBYY FlexiCapture, ABBYY Timeline, and ABBYY FineReader PDF. Customers do not need to take any action on ABBYY products. As part of our standard vulnerability management process, we are also checking that any supporting or third-party systems that use PHP are patched to the fixed versions (8.5.12, 8.4.27, 8.3.36 or 8.2.35) or have been verified as not exposed. We will update this notice if anything changes. Security Advisory: Third-Party Supply-Chain Credential Exposure (Trivy) — March 2026 Incidents September 2, 2026 We identified potential exposure of internal credentials associated with our CI/CD and artifact management tooling, arising from the known March 2026 Trivy supply chain compromise. Based on our investigation to date, we have found no evidence of unauthorised use of the affected credentials within the systems and logs available to us, and no related alerts were raised by our security operations centre during the relevant period. The credential's access permissions were time-limited by design and had expired within approximately 60 hours of issuance, independent of any remediation action taken. As a precaution, we have also rotated the affected credentials. We will update this notice should any new information emerge. A message to our customers about the Klue security incident General June 25, 2026 ABBYY was recently informed of a security breach involving Klue, a third-party platform previously used for competitive intelligence. The breach impacted Salesforce data accessed through Klue's integration. We want to assure you that ABBYY's network, products, and technology were not affected. Our systems remain secure. In response, we immediately revoked the affected credentials, disabled the impacted integration, discontinued Klue's use and completed a full security review to confirm no further issues. If you have questions, please contact our security team at infosec@abbyy.com. Thank you for your trust in ABBYY. You can also subscribe to receive automatic updates as they become available. SOC 2 Report Compliance June 3, 2026 The 2026 ABBYY SOC2 Type II report has been published on TrustCenter. This report covers the period of April 1, 2025 to March 31, 2026. It also covers our Vantage, Timeline and FlexiCapture systems in one report so there's no need to download multiple reports any longer.