Third Party Index

Snapshot 24285

Document
Trust center
URL
https://trust.madcapsoftware.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
226210 bytes
SHA-256 (raw)
de209717d6eba7627815f9c0f4158afd89170e54d6b94b299622e2b5cb4328e8
SHA-256 (normalized text)
8ac3580a59ffda06c1229ed16a4dec46c8f9cd645cbf6c57e80b5e1559cfaf1a

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Controls are continuously monitored
Denver, Colorado, USA
Sep 24, 2026
Welcome to MadCap Trust
Explore our commitment to security and request documentation.
At MadCap Software, protecting your data and maintaining trust are core to how we operate. We prioritize security and privacy across our products and services, and we're dedicated to offering transparency into the integrity, availability, and confidentiality of our solutions.
About Us
Company URL
madcapsoftware.com
privacy@madcapsoftware.com
MadCap Software is a leading provider of technical content and knowledge management solutions, helping organizations create, manage, and securely publish critical documentation at scale. Our products, such as MadCap Flare, Flare Online, IXIA CCMS, Create, Syndicate supports teams across software, healthcare, finance, manufacturing, and government in delivering consistent, compliant, and high-quality content. At MadCap Software, we are committed to delivering secure, reliable, and high-quality software products that our customers can trust. Security is embedded into every stage of our product lifecycle from design and development to deployment and ongoing operations. Our dedicated Security & Compliance Team works continuously to safeguard customer data, maintain system integrity, and ensure our practices align with industry standards and regulatory requirements. We follow a risk-based approach and operate with transparency, accountability, and a commitment to continuous improvement. We maintain a strong security posture through: 1. Robust security controls and proactive monitoring 2. Regular third-party assessments 3. SOC 2 Type 2 controls that aligns with ISO 27001 controls 4. Clear policies and processes For more details on our security practices, certifications, and reports, please explore the sections available on this Trust Page.
MadCap Suite
Flare
Flare Online (aka Central)
IXIA CCMS
Xyleme Syndicate
Xyleme Create
Xyleme Elevate
MadTranslations
MadSkills
Lingo
Contributor
Policies & Controls
Acceptable Use Policy
Access Control Policy
Anti-Human-Trafficking Policy
Audit and Accountability Policy
Awareness and Training Policy
Code of Conduct
Computer Protection Policy
Configuration Management Policy
Contingency Planning Policy
Data Classification & Handling Policy
Data Protection & Retention Policy
Encryption Policy
Identification and Authentication Policy
Incident Response Policy
Information Security Policy
Infrastructure Change Policy
Maintenance Policy
Media Protection Policy
Password Policy
Personnel Security Policy
Physical and Environmental Protection Policy
Planning Policy
Risk Assessment Policy
Software Development Life Cycle Policy (SDLC)
System and Communications Protection Policy
System and Information Integrity Policy
System and Services Acquisition Policy
Vendor Management Policy
Legal
Cyber Insurance Policy
Terms Of Service
MadCap Incorporation Certificate
MadCap Incorporate Certificate (Texas)
Privacy Policy
W9
GDPR Compliance
Law Enforcement Requests Policy
Transparency Report
Data Transfer Impact Assessment
MadCap Data Processing Addendum
Flare Online Data Privacy Document
IXIA CCMS Data Privacy Document
MadCap Subprocessor List
Trusted By
GE Healthcare
Amazon
Cisco
Meta
UPS
U.S. Air Force
Oracle
Sony
CitiBank
Trust Updates
June 2026 - Third-Party Penetration Testing Completed
An independent security firm completed a penetration test for Flare Online & IXIA CCMS. A summary report is available on trust page.
January 2026 - Syndicate and Create Penetration Tests Completed
The Xyleme Create and Syndicate penetration test executive reports are now available.
December 2025- Annual Employee Security & Privacy Awareness Training
The annual security, privacy and secure application development awareness training modules has been assigned to employees
November 2025 - SOC2 Type 2 Audit Complete
We are pleased to announce that we have completed our 2025 SOC 2 Type 2 audit, covering a period of 12-months for all our products. You can find the updated report on this page.
August 2025 - Successful Disaster Recovery Test Completed
MadCap completed our annual Disaster Recovery Test of Flare Online and IXIA CCMS
May 2025 - Third-Party Penetration Testing Completed
An independent security firm completed a penetration test across our core applications. No critical vulnerabilities were found; a summary report is available upon request.
January 2025 – Enhanced Role-Based Access Controls in MadCap Central
MadCap Central now supports more granular permissioning, enabling better control over project-level access and user roles.
Compliance Frameworks
SOC2
GDPR
CCPA
SMB Products
Flare & Flare Online (Central)
Flare/Flare Online (Central) CMS SOC2 Type 2 (2025) Report
Flare Bridge Letter
CAIQ Lite v4.0.3n 2024
Central Security Whitepaper
Flare Online High-Level Diagram
CMS Export Classification (ECCN/ENC)
End User License Agreement (EULA)
Flare Online Penetration Test Report (Executive Summary)
Flare Online Disaster Recovery Test Report
MadCap SIG lite 2023
MadCap 2023 CAIQ
Bill of Materials - Flare Output
Bill of Materials - Flare Desktop
Enterprise Products
IXIASOFT CCMS
IXIA CCMS SOC2 Type 2 (2025) Report
IXIA CCMS Bridge Letter 2026
IXIA CCMS Penetration Test Report
IXIA CCMS Disaster Recovery Test Report
IXIA CCMS QMS
Create & Syndicate (formerly Xyleme)
MadCap Create & Syndicate SOC 2 Type 2 (2025) Report
MadCap Syndicate Security Program
MadCap Syndicate Privacy Program
Create Penetration Test Executive Report
Syndicate Penetration Test Executive Report
Syndicate & Create N-Tier Architecture
Syndicate Hosting Architecture
Syndicate Data Flow Diagram
Create Hosting Architecture
Create Syndicate Disaster Recovery Report
Create & Syndicate Bridge Letter
MadTranslations
ISO 13485 Certification
ISO 9001 Certification
ISO 18587 Certification
ISO 17100 Certification
Controls
Data and Privacy
Maintains a Terms of Service
Organizational Security
Acceptable Use Policy
Annual Performance Evaluations
Formal Recruiting Process
Job Descriptions