Snapshot 222530
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Power Factors' Trust Center is an online portal where customers can self-request and download Power Factors' security compliance certifications, reports, and attestations. For any required support, please reach out to your Power Factors Account Team. Privacy PolicyOpens in new tab Filter by Compliance S SOC 1 Type II SOC 2 Type II ISO/IEC 27001 ISO/IEC 27017 ISO/IEC 27019 ISO/IEC 9001 I ISO/IEC 14001 I ISO/IEC 45001 GDPR NIS 2 Directive Resources View all ISO/IEC ISO/IEC 27001 ISO/IEC 27017 ISO/IEC 27019 SOC Audits Drive - SOC1 Type II Report Drive - SOC 1 Bridge Letter Unity - SOC1 Type II Report Unity - SOC1 Bridge Letter View 3 more Penetration Tests Unity APM Penetration Test Unity EMS/SCADA Penetration Test Unity Assets Oversight and Invoice Management Penetration Test Unity Field Service Management Penetration Test View 2 more Policies and Standards Policy - Information Security Policy Policy - Information Security Acceptable Use Policy Policy - Incident Response Policy - Vendor Management View 12 more White Papers White Paper - Securing OT Site Connections White Paper - REMI AI Security White Paper - Greenbyte Security Overview White Paper - NIS 2 Directive Compliance Matrix Controls View all Organizational Security Confidentiality Agreement Acceptable Use Policy Code of Conduct View 8 more Organizational Security controls Access Control VPN Access with MFA Multi-Factor Authentication (MFA) Hardware Security Keys for Admins View 6 more Access Control controls Endpoint Security Mobile Device Management (MDM) Laptop MDM Enrollment & Configuration Profiles Data Loss Prevention (DLP) on Endpoints View 3 more Endpoint Security controls Data Security Encryption at Rest Encryption in Transit Data & Media Sanitization View 1 more Data Security control Change Management Change Advisory Board Review Change Management Policy Change Rollback Procedures View 2 more Change Management controls Business Continuity Business Continuity & Disaster Recovery Plan Disaster Recovery Testing Automated Data Backups Subprocessors View all AWS • Cloud Hosting US, EU Cloud hosting for SaaS products. Location dependent on which region application is provisioned. Microsoft Azure • Cloud Hosting US, EU, CA Cloud hosting for SaaS products. Location dependent on which region application is provisioned. Google Cloud • Cloud Hosting US, EU Cloud hosting for SaaS products. Location dependent on which region application is provisioned. Salesforce • Internal CRM and Cloud Hosting US -Salesforce Orgs are used to host Power Factors internal CRM and Support Portal -Used to host Unity FSM FAQ Updates View all General PHP Vulnerabilities Update Published October 21, 2026 We are aware of the recently disclosed PHP2Shell vulnerabilities affecting certain PHP environments and have assessed our exposure. Based on our internal review, our customer-facing applications do not utilize PHP in the web application layer and are therefore not impacted by this vulnerability. In addition, any internal PHP-based applications are protected by the Wiz runtime sensor operating in blocking mode while remediation and library updates are being completed. At this time, we have observed no indicators of compromise or related detections within our production environment through Wiz monitoring. Based on the evidence available, we believe we are in a strong security posture with respect to this vulnerability. As part of our defense-in-depth security program, Power Factors leverages Wiz for continuous cloud security monitoring and threat detection. Additional information about our security controls and practices can be found in our Trust Center. Incident FortiBleed Update Published June 25, 2026 Power Factors has completed its internal review of the FortiBleed incident and has concluded it is not impacted. All Fortinet devices used internally and for clients with managed services agreements for SCADA networks are not impacted. Power Factors has reviewed the list of affected devices and validated all Fortinet devices it maintains and found no evidence of compromise. https://www.cisa.gov/news-events/alerts/2026/06/18/cisa-urges-hardening-fortinet-devices-after-reports-credential-exposureOpens in new tab