Snapshot 227446

Document
Subprocessor list
URL
https://trust.circleci.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
964582 bytes
SHA-256 (raw)
b11394d8acbce311955cbe2203abb384f0bacc0a006239f81fa7cc5e3bf87a25
SHA-256 (normalized text)
2aea47d28dc079c41a5a72dbd2de68e17a4fef6dcf7bf989c334a6d5dda31dfd

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

CircleCI Trust Center
Start your security review
View & download sensitive information
Overview
CI/CD is the foundation of engineering productivity and speed. At CircleCI, we know that a team’s velocity must go hand in hand with building securely.
World-class engineering teams don’t sacrifice security for speed, but rather, choose platforms like CircleCI that deliver both.
We are constantly evaluating how we can improve both our internal security posture, and how we improve security for our customers. We invite questions and conversations on security at CircleCI and look forward to working with you to improve the security of the software ecosystem as a whole. Please email CircleCI's GRC team with any questions.
For customers interested in signing a Data Processing Addendum with CircleCI, you can sign our DPA here.
CircleCI's Privacy Policy can be viewed here.
Compliance
SOC 2 Type 2
FedRAMP LI-SaaS
CSA AI Trustworthy Pledge 2025
GDPR
AWS Advanced Technology Partner
CCPA
CPRA
EU-US DPF
Swiss-US DPF
UK Extension to EU-US DPF
CSA STAR Level 1
CircleCI is reviewed and trusted by
Compass Real Estate
Headspace
Lightspeed Commerce
Okta
Procore Technologies
Quizlet
Documents
Featured Documents
REPORTSPentest Report
REPORTSSOC 2 Report
SELF-ASSESSMENTSCAIQ
SELF-ASSESSMENTSSIG Lite
LEGALCyber Insurance
POLICIESShared Responsibility Policy
Access Control
Access Log Management
Automated Account Management
Bring Your Own Device (BYOD)
View more
AI
AI Overview
AI Training Data and Bias
AI Security
View more
App Security
Responsible Disclosure
Application Penetration Testing
Bot Detection
View more
Asset Management
Asset Classification
Asset Inventories (Hardware/Software)
Asset Tracking
View more
BC/DR
Alternate Processing/Storage Site
Business Continuity Management System (BCMS)
Business Continuity Plan (BCP)
View more
Change Management
Change Management Program
Change Restrictions
Changes Notification & Verification
View more
Continuous Monitoring
Automated Alert Response
Automated Compliance Monitoring
Data Loss Prevention System (DLP)
View more
Corporate Security
Asset Management Practices
Email Protection
Employee Handbook
View more
Data Privacy
Cookies
Data Breach Notifications
Data Into System
View more
Data Security
Access Monitoring
Certificates of Destruction
Data Asset Classification
View more
Endpoint Security
Anti-Malware
Disk Encryption
DNS Filtering
View more
ESG
Anti-Bribery and Corruption
Anti-Competitive Practices
Anti-Modern Slavery
View more
Incident Response
Designated Response Personnel
Forensic Retainer
Incident Reporting Process
View more
Infrastructure
Status Monitoring
Amazon Web Services
Anti-DDoS
View more
Legal
Sub-Processors
Tax Certificate
Customer Audit Rights
View more
Network Security
Bot Detection
Data Loss Prevention
Distributed Denial of Service Protection (Anti-DDoS)
View more
Physical & Environment
Access Monitoring
Alarms & Surveillance
Alternate Work Sites
View more
Policies
Access Control Policy
Asset Management Policy
Awareness and Training Policy
View more
Product Security
Audit Logging
Data Security
Integrations
View more
Reports
Data Flow Diagram (DFD)
Network Diagram
PCI DSS
View more
Risk Management
Data Access/Impact Levels
Risk Assessments
Supply Chain Risk Management
View more
Risk Profile
Data Access LevelInternal
Recovery Time Objective4 hours
Recovery Point Objective1 hour
View more
Self-Assessments
CAIQ
SIG Lite
Training
Employee Privacy Training
Phishing Training
Role-Based Training
View more
Sub-Processors
CircleCI Trust Center Updates
PCI
Compliance
CircleCI has completed its annual review of the PCI DSS v4.0.1 Report on Compliance (ROC) Attestation of Compliance (AOC) for Service Providers, which is now available for download.
Customers can access the document in the Trust Center.
Certificate of Liability Insurance (COI)
Compliance
Updated: 2026–27 Certificate of Insurance
CircleCI's Certificate of Insurance for the 2026–2027 policy period (October 1, 2026 – October 1, 2027) is now available. This certificate includes our General Liability, Automobile, Umbrella, Workers' Compensation, and Cyber / Errors & Omissions coverage.
Customers who previously downloaded the 2026–27 certificate should replace it with this version, which reflects our complete coverage.
CircleCI has uploaded the new Certificate of Liability Insurance (COI) to the Trust Center.
The certificate evidences CircleCI's active coverage and is available for download by approved Trust Center users. This replaces the prior certificate.
Thank you.
Annual Penetration Test
Compliance
CircleCI has completed its annual penetration test, and has uploaded the signed testing summary to its Trust Center. Per the test results, there were no identified issues during the assessment.
Sub-processor Update
Subprocessors
Hello,
We are writing to inform you that CircleCI's sub-processor list has been updated.
The updated list can be found at https://trust.circleci.com. If you have any questions, please contact us at compliance@circleci.com.
Thank you
SafeBase Maintenance
General
On Thursday, April 2nd, between 07:00pm-8:00pm PT/10:00pm-11:00pm ET, the CircleCI SafeBase account will be included in a routine database maintenance window. During this time, you may experience brief disruptions in service.
SafeBase assures us that they will strive to minimize any inconvenience, and appreciates your understanding and support as they continue to improve their services.
If you need help using this CircleCI Trust Center, please contact us.
Contact support
If you think you may have discovered a vulnerability, please send us a note.
Report issue