Snapshot 245453
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content |Trust Center Canonical Trusted open source for everyone security@canonical.com Privacy Policy Filter by Compliance SOC 2 GDPR ISO/SAE 21434 FIPS CIS Benchmarks DISA STIG IEC 62443-4-1 OpenSSF Principle for Package Repository Security ISO 27001:2022 ISO/IEC 9001 Resources View all SOC2 Reports 2026 Canonical Support Services SOC2 Type II reprot 2026 Canonical Managed Services SOC2 TypeII report Data Protection Privacy Notice Opens in new tab Ubuntu Resources Ubuntu Certifications and Hardening Opens in new tab Infrastructure Hardening with Ubuntu Opens in new tab Disclosure policy Opens in new tab Ubuntu Core Pentest Report - 2024 EU Cyber Reslience Act EU CRA webpage Opens in new tab EU CRA for devices whitepaper Opens in new tab Secure Software Development Lifecycle IEC 62443-1 IEC 62443-1 Report ISO 27001 Accessibility ISO/SAE 21434 ISO/SAE 21434 report ISO 9001 ISO 9001 Certification Other resources TSA Security Declaration Opens in new tab Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 7 more Infrastructure security controls Organizational security Employee background checks performed Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees View 6 more Organizational security controls Product security Control self-assessments conducted Penetration testing performed Vulnerability and system monitoring procedures established View 3 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 18 more Internal security procedures controls Data and privacy Data deletion requests handled Data classification policy established Data retention procedures established View 6 more Data and privacy controls Data collected Customer personally identifiable information Names and business email address (for support services) Machine information (for Landscape SaaS customers): IP, Telemetry and Machine information List of Key subprocessors is provided in the "Subprocessors" section of the Trust Center Subprocessors View all Salesforce • Support portal EU - United Kingdom Salesforce hosts the Support portal that customers use to open and track support requests Files.com • Upload of large files for support case handling United States Customer large fIle upload Google Workspace • Joining meetings, emailing and document sharing Global Canonical uses Google Workspace for meetings, emails and documents management and storage Google Voice • Calling Canonical - Support requests Global Phone system FAQ View all Updates View all Compliance Canonical achieves ISO 27001 certification Published September 30, 2025 **Canonical is proud to announce it has achieved the ISO/IEC 27001 certification for its Information Security Management System (ISMS), following an extensive assessment by A-LIGN, a respected certification provider. This milestone highlights Canonical’s commitment to policies, processes and controls that support the confidentiality, integrity and availability of internal and customer data, supplier information, and the company’s corporate infrastructure environment. “Achieving the ISO 27001 certification is a testament to our team's unwavering commitment to information security,” said Stephanie Domas, CISO at Canonical. “It validates that our processes meet the highest global standards, giving our customers and partners the confidence that their data is protected with the utmost care and rigor. This isn't a one-time achievement, but a promise to continuously strengthen our security posture as a core part of our business."** ** Robust information security for customers ISO/IEC 27001 is among the most widely recognized and internationally accepted information security standards. Benefits to Canonical customers include: Data security - Customers can rely on established processes and best practices to safeguard data and handle incidents. Regulatory compliance – Customers can demonstrate that Canonical is certified by an internationally recognized standard to help in their own regulatory compliance efforts. Commitment to improvement – One of the key requirements of ISO/IEC 27001 is continuous improvement. Maintaining the certification means Canonical will continue to improve its security and resilience. An ongoing commitment Achieving ISO 27001 certification is not a one-time event—it’s a continuous journey towards excellence. Canonical is committed to maintaining a high standard of quality and correctness, aiming to continuously improve its security posture by adapting to emerging threats and new regulatory requirements. The certification also complements Canonical’s certifications for IEC 62443-4-1Opens in new tab, which governs cybersecurity in Industrial Automation and Control Systems (IACS), and ISO/SAE 21434Opens in new tab for automotive cybersecurity standards. Enterprises relying on Canonical’s open source solutions can deploy them with confidence knowing they are backed by robust and long-term-supported, open source security processes.** Compliance Canonical achieves IEC 62443-4-1 compliance in Industrial Automation and Control Systems Published September 18, 2025 Canonical is proud to announce it has achieved compliance with IEC 62443-4-1 for cybersecurity in Industrial Automation and Control Systems (IACS). Building on Canonical’s existing ISO/SAE 21434Opens in new tab certification, this milestone expands Ubuntu’s leadership in securing critical infrastructure at the intersection of IT and operational technology (OT) environments. Achieving IEC 62443-4-1 compliance ensures Canonical solutions can be deployed with confidence across critical sectors backed by robust and long-term-supported, open source security processes. Compliance Canonical achieves ISO/SAE 21434 certification Published February 28, 2025 Canonical is proud to announce it has achieved the ISO/SAE 21434 certification for its Security Management System, following an extensive assessment by TÜV SÜD, a globally respected certification provider. This milestone highlights Canonical’s leadership in providing trusted and reliable open source solutions for the automotive sector. It underscores the company’s commitment to three key pillars: robust cybersecurity, alignment with global industry standards, and building a safer future for autonomous and intelligent vehicles. Check our blog for more details: https://canonical.com/blog/canonical-achieves-iso-21434-certificationOpens in new tab