Snapshot 223666
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Subscribe Sign In My Documents My Account Change Password Sign Out Trust Center Compliance Documents Updates Trust Center Overview The Portal26 Enterprise GenAI adoption platform is an essential infrastructure for enterprises to successfully manage, monitor, and measure their GenAI program. Our customers gain rich visibility into usage while mitigating risks associated with compliance, IP, and privacy. Portal26 uniquely supports audits and detailed rear-view forensics, a critical gap in enterprise AI infrastructure. Additionally, Portal26 supports employee education through usage-based policy distribution and learning materials. Boards and business leaders rely on Portal26 to understand how GenAI impacts their organizations; IT and security teams leverage robust security and forensics controls; compliance, risk and legal teams also rely on Portal26 to provide critical reporting and audit functionality. Compliance Request Access to Private Documents 1 Result Documents that summarizes our adherence to laws, regulations, and internal policies, helping ensure transparency, risk management and legal conformity SOC 2 2026 Documents My Documents Request Access to Private Documents Access Control Policy Asset Management Policy Availability Policy Breach Policy Business Continuity and Disaster Recovery Policy Code of Conduct Policy Confidentiality Policy Data Backup and Recovery Policy Data Classification Policy Data Privacy Policy Data Retention Policy Employee Privacy Policy and Notice Employee Training Policy Encryption Policy Human Resource Security Policy Information Security Policy Mobile Device Teleworking and Malware Policy Network Security Policy Office Security Policy Operational Security Policy Privacy Impact Assessment Policy Process Integrity Policy Risk Assessment Policy Roles Policy Secure Software Development Lifecycle Policy Security Incident Response Policy System Change Policy System Hardening Policy Vendor Management Policy Vulnerability Scanning Policy Offering identity Certification Package Portal26 Data Security AI Processing Portal26 NIST 4210 Portal26 NIST A1388 Portal26 NIST A1491 2026 Penetration Testing Report Vulnerability Report - Oct 2026 - pdf Vulnerability Report - Oct 2026 - machine readable json Historical vulnerability - machine readable json Accepted vulnerability information Ongoing Certification Report - Example - pdf Ongoing Certification Report - Example JSON Policy Section Access Control Policy Asset Management Policy Availability Policy View More FedRAMP Offering identity Certification Package Progress View More Infrastructure Business Continuity and Disaster Recovery Plan AWS Risk Profile Data Access Level Impact Level Recovery Time Objective View More Product Security Multi Factor Authentication Data Security Role-Based Access Control Reports Portal26 Data Security AI Processing Portal26 NIST 4210 Portal26 NIST A1388 View More Data Security Encryption-At-Rest Encryption-In-Transit App Security Vulnerability And Patch Management Code Analysis Legal Privacy Policy Master Services Agreement Data Privacy Cookies Data Breach Notifications Employee Privacy Training Access Control Data Access Password Security Endpoint Security Mobile Device Management Threat Detection Corporate Security Incident Response Security Awareness Training FedRAMP Reports Vulnerability Report - Oct 2026 - pdf Vulnerability Report - Oct 2026 - machine readable json Historical vulnerability - machine readable json View More Policy Section Access Control PolicyUpdated 23/07/2026 Asset Management PolicyUpdated 23/07/2026 Availability PolicyUpdated 23/07/2026 Breach PolicyUpdated 23/07/2026 Business Continuity and Disaster Recovery PolicyUpdated 29/09/2026 Code of Conduct PolicyUpdated 23/07/2026 Confidentiality PolicyUpdated 23/07/2026 Data Backup and Recovery PolicyUpdated 23/07/2026 Data Classification PolicyUpdated 23/07/2026 Data Privacy PolicyUpdated 23/07/2026 Data Retention PolicyUpdated 23/07/2026 Employee Privacy Policy and NoticeUpdated 23/07/2026 Employee Training PolicyUpdated 23/07/2026 Encryption PolicyUpdated 23/07/2026 Human Resource Security PolicyUpdated 23/07/2026 Information Security PolicyUpdated 23/07/2026 Mobile Device Teleworking and Malware PolicyUpdated 23/07/2026 Network Security PolicyUpdated 23/07/2026 Office Security PolicyUpdated 23/07/2026 Operational Security PolicyUpdated 23/07/2026 Privacy Impact Assessment PolicyUpdated 23/07/2026 Process Integrity PolicyUpdated 23/07/2026 Risk Assessment PolicyUpdated 23/07/2026 Roles PolicyUpdated 23/07/2026 Secure Software Development Lifecycle PolicyUpdated 23/07/2026 Security Incident Response PolicyUpdated 29/09/2026 System Change PolicyUpdated 29/09/2026 System Hardening PolicyUpdated 23/07/2026 Vendor Management PolicyUpdated 23/07/2026 Vulnerability Scanning PolicyUpdated 29/09/2026 FedRAMP Offering identityUpdated 07/08/2026 Portal26 is pursuing FedRAMP 20x certification for the Portal26 SaaS Platform deployed in AWS GovCloud (US), for direct use by federal agencies handling Controlled Unclassified Information (CUI). Click Open URL for details. Certification PackageUpdated 07/08/2026 Portal26 is pursuing FedRAMP 20x certification for the Portal26 SaaS Platform deployed in AWS GovCloud (US), for direct use by federal agencies handling Controlled Unclassified Information (CUI). Click Open URL for machine readable JSON ProgressUpdated 28/10/2026 Milestones - SOC 2 Type II examination completed - Complete, 2026-06-03 - FedRAMP Marketplace listing completed - 2026-08-12 - GovCloud deployment - the environment agency customers will use completed - 2026-08-15 - Class C independent assessment by A-LIGN Compliance and Security, Inc. dba A-LIGN (FedRAMP assessor ID 138665) — In progress, started 2026-09-15; final review scheduled 2026-11-02 to 2026-11-13 - FedRAMP Class C Certification to be scheduled once assessment is complete. Security posture today - SOC 2 Type II, Security criteria, examined by Johanson Group LLP - Available to federal agency customers on request through the Trust Center. - Deployed in AWS GovCloud (US), inheriting the AWS GovCloud FedRAMP authorization Questions Federal agencies evaluating Portal26 can reach the team at security@portal26.ai Programmatic AccessUpdated 25/09/2026 The published FedRAMP Certification Package artifacts are retrievable directly by an automated system, with no credential, API key, session, or request form. Machine-readable: URL: https://trust1.portal26.ai/fedramp/listing/frc-cso-pkg.json Format: application/json Human-readable: URL: https://trust1.portal26.ai/fedramp/listing/index.html Format: text/html Both artifacts are served at stable URLs and regenerated in place on a monthly cadence, and additionally whenever a change occurs that alters their content — see the Certification Package maintenance process. An agency system may poll either URL to obtain the current state of the package rather than tracking changing locations. Assessment reports, policies and procedures are access controlled and retrieved through the Trust Center's access-request workflow, not by unauthenticated programmatic retrieval. Infrastructure Business Continuity and Disaster Recovery PlanUpdated 06/06/2024 Portal 26 has established a comprehensive Business Continuity and Disaster Recovery (BCDR) plan, integral to our strategy for ensuring resilience and preparedness. Key features of our plan include: Annual Review and Approval Our BCDR plan is rigorously exercised, reviewed, and approved every year to ensure its relevance and effectiveness. Comprehensive Testing We conduct regular, thorough testing of critical services, backup systems, and operational infrastructure. This practice guarantees that our business continuity requirements are consistently met and refined. Proactive Risk Management A proactive risk assessment program and detailed business impact analysis span the entire organization. These processes are designed to identify potential threats and evaluate the impact on our business functions, allowing us to implement necessary mitigations. Commitment to Preparedness Our BCDR plan reflects a steadfast commitment to maintaining operational resilience and ensuring uninterrupted service across all business areas. This comprehensive approach ensures that we are prepared to respond effectively to disruptions, safeguarding our operations and client interests. Continuous Improvement We strive for continuous improvement in our disaster recovery capabilities, adapting to emerging threats and evolving business needs. This ensures that our BCDR plan remains a living document, dynamically evolving to meet the challenges of an ever-changing landscape. AWSUpdated 06/06/2024 Portal 26 infrastructure is hosted by Amazon Web Services (AWS), leveraging AWS's robust cloud solutions to ensure scalable, secure, and reliable service delivery. This strategic choice allows Portal 26 to benefit from AWS's industry-leading capabilities in cloud computing, Risk Profile Data Access LevelUpdated 05/06/2024 As a SaaS vendor selling to an enterprise customer, what type of data do you need access to? Impact LevelUpdated 05/06/2024 What is the potential impact to your enterprise customer if the data and/or functionality you, as the vendor, are supposed to manage, is compromised? Recovery Time ObjectiveUpdated 05/06/2024 What is your recovery time objective in case of critical failure? (e.g., your DB is deleted) Recovery Point ObjectiveUpdated 05/06/2024 What is your recovery point objective in case of critical failure? (e.g., your DB is deleted) Critical DependenceUpdated 05/06/2024 Will your product be a system that your enterprise customer critically depends on? (i.e., a failure would cost them a ton of money) Third Party DependenceUpdated 05/06/2024 Are you also using other third-party services to manage or support your customers? YES HostingUpdated 05/06/2024 Are you hosted only on one of the major cloud providers or do you have any on-premise systems? Major CSP Product Security Multi Factor AuthenticationUpdated 06/06/2024 At Portal 26, Multi-Factor Authentication (MFA) is enabled for all users to enhance security measures significantly. MFA is a critical component of our security strategy, designed to safeguard user accounts and data by adding additional verification steps beyond just passwords. Data SecurityUpdated 06/06/2024 Portal 26 dedicated to fostering trust within our organization and platform by ensuring the robust protection of customer data, models, and products. Role-Based Access Control Updated 06/06/2024 Portal 26 offers comprehensive access control mechanisms, including both Role-Based Access Control (RBAC) and User-Based Access Control (UBAC), within our product suite. This dual approach enhances security and operational efficiency by allowing tailored access permissions based on roles and individual user needs. Reports Portal26 Data Security AI ProcessingUpdated 24/07/2026 Portal26 NIST 4210Updated 24/07/2026 Portal26 NIST A1388Updated 24/07/2026 Portal26 NIST A1491Updated 24/07/2026 2026 Penetration Testing ReportUpdated 14/10/2026 Data Security Encryption-At-RestUpdated 06/06/2024 Portal 26's customer data is encrypted at-rest. Portal 26 is committed to following encryption best practices per industry guidelines and continually reviews the rigor of current encryption standards. Encryption-In-TransitUpdated 06/06/2024 Portal 26's customer data is encrypted in-transit . Portal 26 is committed to following encryption best practices per industry guidelines and continually reviews the rigor of current encryption standards. App Security Vulnerability And Patch ManagementUpdated 06/06/2024 Portal 26 rigorously adheres to a formal vulnerability management process, ensuring that vulnerabilities are systematically identified, assessed, and addressed in accordance with a documented Service Level Agreement (SLA). Our approach reflects a commitment to maintaining high standards of security and operational integrity. Code AnalysisUpdated 06/06/2024 At Portal 26, we employ a multifaceted approach to code analysis to proactively identify and address issues in both our proprietary code and third-party dependencies. This comprehensive strategy ensures the delivery of high-quality, secure, and reliable software. Legal Privacy PolicyUpdated 06/06/2024 Safeguarding customer privacy is a core commitment of Portal 26 Service. Additional information on our privacy practices can be found at https://portal26.ai/privacy-policy/ Master Services AgreementUpdated 06/06/2024 The use of Portal 26 including rights, restrictions, and applicable privacy safeguards is governed by our business terms. Data Privacy CookiesUpdated 07/06/2024 Portal 26 Effectively using cookies, to enhance the user experience, increase engagement, and improve overall business performance. Data Breach NotificationsUpdated 07/06/2024 Portal 26 's data breach notifications are a crucial part of an organization's response to data breaches, ensuring that affected individuals are informed and can take action to protect themselves. These notifications also demonstrate an organization's commitment to transparency and compliance with data protection regulations. Employee Privacy TrainingUpdated 07/06/2024 Portal 26 personnel perform security and privacy awareness training on an annual basis. Topics covered include: Passwords, Mobile devices, Social Engineering, Physical security, Phishing, etc. Access Control Data AccessUpdated 07/06/2024 Portal 26 safeguards its internal systems with stringent access control measures, continuously monitored and updated in alignment with industry best practices. Our access policies strictly adhere to the principles of least privilege and separation of duties, ensuring that access is granted only to the extent necessary. These policies undergo regular reviews by administrators and are meticulously documented with clear justifications for any provisioning or modifications. Furthermore, access is promptly revoked in accordance with rigorous termination protocols, guaranteeing the highest level of security and integrity for our internal systems. Password SecurityUpdated 05/08/2024 Portal 26 has a strong internal password policy that includes a requirement for MFA for account that do not support SSO. Endpoint Security Mobile Device ManagementUpdated 07/06/2024 Portal 26 centrally manages and secures all employee endpoints through a Mobile Device Management (MDM) solution. This systematic management allows us to enforce security policies, distribute software and updates, and monitor endpoint integrity. Threat DetectionUpdated 07/06/2024 Portal 26 Security Defense and Intelligence Team actively monitors the environment for known attacker tactics, techniques, and procedures (TTPs), as well as known malicious binaries and other suspicious activities. These regular activities are complemented by periodic reviews and investigations into anomalous activities to discover unknown threats occurring on a regular cadence. Corporate Security Incident ResponseUpdated 07/06/2024 Portal 26 maintains a rigorously documented Incident Response Plan that serves as our predefined procedure for handling potential security incidents. This plan is systematically reviewed, tested, and approved by appropriate stakeholders on an annual basis to ensure readiness and effectiveness in responding to security incidents. Security Awareness TrainingUpdated 07/06/2024 Portal 26 is committed to maintaining a high level of security and privacy awareness among its personnel through comprehensive annual training programs. This training covers critical topics such as password management, mobile device security, social engineering tactics, physical security, phishing attacks,etc. FedRAMP Reports Vulnerability Report - Oct 2026 - pdfUpdated 14/10/2026 Vulnerability Detection and Response Report Vulnerability Report - Oct 2026 - machine readable jsonUpdated 14/10/2026 Machine readable json of vulnerability report Historical vulnerability - machine readable jsonUpdated 14/10/2026 Accepted vulnerability informationUpdated 14/10/2026 Ongoing Certification Report - Example - pdfUpdated 14/10/2026 Human-readable example of Portal26's quarterly Ongoing Certification Report, covering 2026-07-01 to 2026-09-30. The first issued report is due 2026-12-01. Ongoing Certification Report - Example JSONUpdated 14/10/2026 Ongoing Certification Report - Example JSON Trust Center Updates Trust Center Launch Published at Introducing the Portal 26 Trust Center, our latest initiative for openness in security practices and developments. Here, we will consistently update you on our measures to secure your data, our responses to emerging threats, and our compliance with regulatory standards. Have confidence in our unwavering commitment to the protection of your information and remain updated with the newest advancements in data security. Portal 26 has Attained SOC2 Type2 Compliance Published at We are proud and excited to announce that the Portal 26 has achieved SOC 2 Type 2 compliance. SOC 2 Type 2 compliance requires an ongoing commitment to security and privacy practices and demonstrates our dedication to protecting our customers' data. We have uploaded the SOC 2 Type 2 report to our trust portal for our customers' reference. Have questions or found a bug? Click Contact Support to reach out to us! Request Access Select which items you would like to access to. Compliance Policy Section Reports FedRAMP Reports Compliance Policy Section Reports FedRAMP Reports Documents 2026 SOC 2 Documents Access Control Policy Asset Management Policy Availability Policy Breach Policy Business Continuity and Disaster Recovery Policy Code of Conduct Policy Confidentiality Policy Data Backup and Recovery Policy Data Classification Policy Data Privacy Policy Data Retention Policy Employee Privacy Policy and Notice Employee Training Policy Encryption Policy Human Resource Security Policy Information Security Policy Mobile Device Teleworking and Malware Policy Network Security Policy Office Security Policy Operational Security Policy Privacy Impact Assessment Policy Process Integrity Policy Risk Assessment Policy Roles Policy Secure Software Development Lifecycle Policy Security Incident Response Policy System Change Policy System Hardening Policy Vendor Management Policy Vulnerability Scanning Policy Documents Portal26 Data Security AI Processing Portal26 NIST 4210 Portal26 NIST A1388 Portal26 NIST A1491 2026 Penetration Testing Report Documents Vulnerability Report - Oct 2026 - pdf Vulnerability Report - Oct 2026 - machine readable json Historical vulnerability - machine readable json Accepted vulnerability information Ongoing Certification Report - Example - pdf Ongoing Certification Report - Example JSON Selected Result Preview - - - - - Request Access Thank you for your request. An admin from Portal26 will review your information and either grant or deny access via the email provided in this form. Request Access this document is already requested Verification Code Enter the verification code that has been sent to your email. Your verification code will expire shortly. Didn’t receive a code? Resend Code Verification Code Enter the verification code that has been sent to your email. Your verification code will expire shortly. Didn’t receive a code? Resend Code Trust Center Updates The Request Has Been Submitted Successfully. Trust Center Updates Request submission failed. Please try again. Trust Center Update Thank you for your request. An administrator from Portal26 team will review your information and will provide access via the email address submitted in this form. Data Subject Access Request Your Privacy Rights Right to Correct Please correct my personal information in Portal26’s records Right of Access Please provide the specific pieces of personal information Portal26 has collected about me Right to Know Confirm if Portal26 is processing my personal info + categories of third parties with whom Portal26 shared it Do Not Sell or Share to a Third Party Do not sell any personal information you’ve stored about me to third parties. Don’t Use My Personal Information for Advertising Do not target me with advertising using my personal information. Delete My Personal Information Delete all personal information you’ve stored about me. First Name* Last Name* Email* Phone Number* Requestor Type* Description* Trust Center Update Request already Exist Trust Center Update DSAR Not Enabled Trust Center Updates Thank you for subscribing to our updates. Stay Updated Enter your email and receive updates when they happen. First Name * Last Name * Company * Email Address * Welcome Back Forgot Password No Account?Request Access Enter MFA Code Enter the MFA code that has been sent to you. Your code will expire shortly. Didn't receive a code? Resend Code Return to Sign in Forgot Password Return to Sign in Change Password Passwords must be a minimum length of 8 characters and contain a combination of alpha, numeric, and special characters. Change Password Enter your current password then type a new secure password for your account. Current Password * New Password * Confirm Password * Request Access Powered by My Documents Request Additional Documents Report An Issue If you believe you've identified a vulnerability. Please don't hesitate to Reach out us. Verify Email We have sent you an email to verify your email, please check to send your message. Contact Us Please select a reason for contacting us then submit your message. First Name * Last Name * Email Address * Company Name * Reason For Contact * Message * File Upload: Enter Captcha * Compliance Documents Updates Subscribe Contact Sign In My Documents Change Password Sign Out Share the Trust Center Copy Link