Snapshot 252082
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content SysAid SysAid is an AI-powered IT and Enterprise Service Management platform. Organizations in healthcare, education, manufacturing, the public sector, and global enterprise rely on SysAid to run their service desks - resolving incidents, fulfilling requests, and automating service delivery with SysAid Copilot and AI agents. Because our platform sits at the center of how employees get help, we treat security and privacy as product requirements. SysAid Cloud is under an ISO 27001-certified ISMS, with ISO 27017 and 27018 certification, annual SOC 2 Type II examination, and independent penetration testing. Sensitive documents are available to customers and to prospects under NDA - use Request access with your corporate email. Privacy PolicyOpens in new tab Compliance SOC 2 Type II Report ISO 27001:2022 ISO 27017 ISO 27018 UK Cyber Essentials 3.2 CSA STAR 1 TX-RAMP Level 2 Resources View all Certifications CSA STAR Level 1 Opens in new tab View 2 more Dex autonomous IT engineer Dex Penetration Test Dex Privacy Policy Opens in new tab Privacy Data Privacy Policy Opens in new tab GDPR Statement Opens in new tab Data Processing Addendum (DPA) Opens in new tab Audit Reports & Attestations SOC 2 Type II Report SOC 2 Type II Bridge Letter - through 9 September 2026 ISO 27001 Report - 2025 ISO 27001:2022 Upgrade View 1 more Corporate Governance Code of Business Conduct and Ethics Opens in new tab Supplier Code of Business Conduct Opens in new tab Corporate & Insurance Cloud Terms and Conditions Opens in new tab SysAid COI Security Overview & Standards Responsible Disclosure Opens in new tab Penetration Testing SysAid HelpDesk Penetration Test AI Governance AI Security and Governance Opens in new tab SysAid AI Security & Trust Overview Opens in new tab Business Resiliency Data Backup Opens in new tab SysAid status page Opens in new tab Data Storage Location Opens in new tab Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information FAQ Subprocessors View all AWS • Hosting Cloud infrastructure provider hosting all SysAid Cloud production environments and customer data. Customers select their hosting region, and production data remains within that region. AWS is a carved-out subservice organization in SysAid's SOC 2 Type II report and holds its own ISO 27001, SOC 2 and PCI DSS attestations. Qlik • Analytics platform Analytics platform powering SysAid's advanced reporting and dashboards, processing service desk data for customers who have licensed Analyst Seats. Qlik is an AWS partner hosted on AWS, so processing remains within AWS infrastructure. Microsoft Azure • OpenAI offering Azure OpenAI Service provides large language model inference for SysAid Copilot and SysAid's AI capabilities. Prompts and responses are processed within Microsoft's Azure environment, are not shared with OpenAI, and are not used to train or improve foundation models. The models are stateless and retain no prompt or response content. Governed by the Microsoft Products and Services Data Protection Addendum. OpenAI • OpenAI offering OpenAI's API Platform provides large language model inference for SysAid Copilot and SysAid's AI capabilities. Inputs and outputs submitted through the API are not used to train OpenAI's models and are retained for no more than 30 days for abuse detection before deletion. The API Platform is SOC 2 Type 2 audited and processes personal data under a data processing addendum. Updates View all Security PHP2Shell (CVE-2026-109618, CVE-2026-109619): SysAid is not impacted Published October 22, 2026 PHP2Shell does not affect SysAid's product or our customers' data. SysAid does not contain any PHP, so it is not exposed to these vulnerabilities. This applies to both SysAid Cloud and SysAid On-Prem. No customer action is required. On October 21, 2026, the PHP project disclosed two critical vulnerabilities in the PHP engine, CVE-2026-109618 and CVE-2026-109619 (PHP security advisoryOpens in new tab). Wiz Research, which found them, named the issue PHP2Shell (Wiz ResearchOpens in new tab). The flaws can let an unauthenticated attacker run code on servers that use PHP to serve web requests. Our security team continues to monitor the situation and will update this page if anything changes. Questions? Contact [support link] or your Customer Success Manager. General Only 1 in 10 IT teams has full software visibility. Here’s what it’s costing them. Published August 24, 2026 Ask yourself how many applications are currently running across your organization. Now ask how many of them are actively being used, how many licenses you’re paying for that nobody needs, and when the next renewal is due. https://www.sysaid.com/blog/asset-management/blog-software-visibility-shadow-aiOpens in new tab General Shadow IT is quietly breaking your software license compliance and your security posture Published August 11, 2026 Not because you’re not doing your job. But because the way employees acquire and use software has changed faster than IT governance can keep up. A developer adds a new SaaS subscription to their team’s budget. A designer starts using an AI tool they found online. A project manager signs up for a collaboration platform using their work email. None of it goes through IT, none of it shows up on your license inventory. And none of it was security-reviewed. Read the full blogOpens in new tab Security SysAid On-Prem Software CVE-2023-47246 Vulnerability Published August 11, 2026 On Nov 2nd, 2023, a potential vulnerability in our on-premise software came to our security team’s attention. We immediately initiated our incident response protocol and began proactively communicating with our on-premise customers to ensure they could implement a mitigation solution we had identified. We engaged Profero, a cyber security incident response company, to assist us in our investigation. Review the full updateOpens in new tab