Snapshot 225126
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Welcome to the Credo AI Trust Center Credo AI is the trusted leader in AI governance. Our platform enables enterprises to discover, assess, and govern every AI agent, model, and application — continuously and in context. Named a Leader in the Forrester Wave™ for AI Governance Solutions and recognized by Gartner, Credo AI is trusted by Fortune 500 organizations to bring structure, oversight, and accountability to their AI programs. Security and compliance are foundational to how we operate. We maintain a SOC 2 Type II examination and invest continuously in our security program so that the platform our customers rely on meets the same governance standards we help them achieve. security@credo.ai Privacy PolicyOpens in new tab Compliance SOC 2 Type II GDPR TX-RAMP Resources View all TRUST CENTER GUIDE SOC 2 Credo AI SOC 2 Type II Report 12.31.25 POLICIES Access Control Policy Third-Party Management Policy Code of Conduct Secure Development Policy View 11 more SECURITY PENETRATION TESTING Pentest Report FY25 Pentest Remediation Attestation.pdf DIAGRAMS Credo-AI-Security-Architecture.png Credo AI SSO Auth flow.png Credo-AI-Data-Flow-Architecture.png Credo AI SaaS Platform Architecture Diagram_AWS.pdf View 1 more OTHER DOCUMENTS Credo AI - Configure Your App with Identity Provider for SCIM User Provisioning.pdf Audit Logs - Overview.pdf Credo AI - SCIM APIs.pdf Audit Log APIs.pdf View 2 more BC/DR FY25 Business Continuity, Disaster Recovery & Incident Response Exercise Summary Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 16 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable Devices encrypted View 10 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 28 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Cloud infrastructure and data storage United States Cloud infrastructure provider for SaaS platform hosting, compute, and data storage. Microsoft Azure • Cloud infrastructure and data storage Europe Cloud infrastructure provider for SaaS platform hosting, compute, and data storage (EU region). Replicated • Application deployment United States Deployment and distribution platform for self-hosted customer environments. Anthropic • AI model provider United States Third-party LLM provider powering optional AI features within the Credo AI platform. Updates View all Security PHP2Shell: Credo AI not affected Published October 26, 2026 On October 21, 2026, critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed in PHP. They can allow an unauthenticated attacker to run code on a server that uses PHP to handle web requests. Credo AI’s products and services do not run on PHP. This includes our application, public API, SDKs, and hosted services, none of which are exposed to these vulnerabilities. No Credo AI update, configuration change, or customer action is required. This notice covers Credo AI’s products and services only. If you operate your own PHP systems, follow the vendor guidance and upgrade to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35. Media View all Credo AI Agent Registry Demo | Governing Autonomous AI Agents Opens in new tab The Credo AI Agent Registry gives enterprises a clear inventory of all their AI agents, capturing key details like capabilities, permissions, autonomy levels, and associated risks. In this demo, see how the registry helps organizations register and track agents across the business, assess agent-specific risks, and maintain oversight with the context needed for governance and compliance. It’s a purpose-built way to bring visibility and control to the era of autonomous AI. Check it out at: https://www.credo.ai/ai-agent-registry Credo AI: The Forrester Wave™: AI Governance Solutions, Q3 2025 Opens in new tab Credo AI has been recognized as a Leader in The Forrester Wave™: AI Governance Solutions, Q3 2025, achieving the highest possible (5/5) scores in 12 criteria—from AI Policy Management to AI regulatory compliance audit and innovation. AI Trust Talks: Shadow AI—From Blind Spots to Governance Opens in new tab A conversation on Shadow AI — ungoverned AI tools operating outside organizational visibility and why enterprises need proactive governance to manage the risk. Covers the distinction between Shadow AI and Shadow IT, the role of security and governance collaboration, and practical approaches to gaining visibility into AI usage across the organization.