Snapshot 223302
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview Welcome to Vertice's Trust Center. Security and data privacy are foundational to everything we build. Here you'll find information about our security posture, compliance certifications, and data privacy practices. Request access to our documentation or use the contact button below to reach our security team. Compliance SOC 2 Type 2 GDPR CCPA Vertice is reviewed and trusted by Arm Blackberry Brisbane Airport ️ Patek Philippe Fyxer Le Figaro Documents REPORTSAI Security at Vertice - Vertice AI REPORTSInformation Security at Vertice - I2P REPORTSInformation Security at Vertice - SaaS COMPLIANCESOC 2 Type 2 APP SECURITYApplication Penetration Testing LEGALCyber Insurance POLICIESAcceptable Use Policy POLICIESAsset Management Policy POLICIESBackup Policy POLICIESBring Your Own Device (BYOD) Policy POLICIESBusiness Continuity Plan POLICIESCode of Conduct Policy Legal Privacy Policy Terms of Service Cyber Insurance View more Policies Information Security Policy Data Retention Policy Software Development Lifecycle Policy View more Data Security Access Monitoring Data Asset Classification Data Backups View more Data Privacy Cookies Data Breach Notifications Data Privacy Officer App Security Application Penetration Testing Responsible Disclosure Vertice AI AI Overview AI Feature AI Training Data and Bias View more Infrastructure Status Monitoring Continuous Monitoring Automated Compliance Monitoring Event & Audit Log Management Security Information & Event Management (SIEM) Reports AI Security at Vertice - Vertice AI Information Security at Vertice - SaaS Information Security at Vertice - I2P Trust Center Updates CVE-2026-109618, CVE-2026-109619 (PHP2Shell) Vulnerabilities Two critical vulnerabilities in the PHP runtime, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively referred to as “PHP2Shell,” became public on October 20, 2026, before their coordinated disclosure date. By sending a malicious web request, an attacker could execute code on a server running an unpatched version of PHP without needing any credentials. The PHP project released fixes on October 21, 2026. Following the disclosure, Vertice assessed its products and infrastructure. PHP is not part of the Vertice platform, so our services are not affected. We have identified no impact to Vertice systems or customer data, and customers do not need to take any action. eMudhra Intermediate CA Compromise Vulnerabilities On October 17, 2026, researchers reported that the private keys behind eight eMudhra intermediate certificate authority (CA) certificates had been exposed. A flaw in eMudhra’s key generation process left the keys weak enough to be derived from the public certificates themselves. Anyone holding these keys could create certificates that appear valid for any domain, opening the door to website impersonation and interception of encrypted traffic. eMudhra has since revoked the certificates, and browser vendors and trust store maintainers have moved to block them. Vertice does not use eMudhra for our domain certificates. After the disclosure, Vertice reviewed where trusted certificate stores are used across our platform, build pipelines, and infrastructure. We updated the affected certificate bundles and language runtimes in our services so they no longer trust the compromised intermediate certificates or associated roots. No action is required by customers. Subprocessors Knowledge Base (FAQ) What is the underlying technology used by Vertice AI? Does the Vertice platform use AI/ML technology? Does Vertice AI process personal data? Is any Customer data used to train LLM/AI models? Do all users have unique ID's for access to production systems and data? View more If you need help using this Trust Center, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue