Snapshot 257691

Document
Trust center
URL
https://trust.linear.app/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
334176 bytes
SHA-256 (raw)
7710ade82409034ac09d6d10dc89db729373736a67193a4871327a01f550ccb9
SHA-256 (normalized text)
5ac3979b967e825793bd907d86a86ad9a282d0cb610d17b90fc844f2838ddd95

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Linear
LinearOpens in new tab is the product development system for teams and agents, purpose-built for planning and building products, designed for the AI era.
We hold ourselves to a commitment to qualityOpens in new tab. To us, security is an essential part of that quality - not a layer that we add later, but something we build in from the start.
The content available here details how we address security within our product, our supporting technology, and our operational practices.
trust@linear.app
Privacy PolicyOpens in new tab
Filter by
Compliance
ISO 27001:2022
SOC 2 Type II
GDPR
HIPAA
Resources
View all
Compliance
ISO 27001 Certificate (April 2026)
ISMS Statement of Applicability (March 2026)
SOC 2 Type II (November 2025)
SOC 2 Bridge Letter (October 2026)
Miscellaneous
Certificate of Insurance (COI)
W-9 2026
Linear Orbit, Inc. Tax Registration
Penetration tests
External Penetration Test Summary (March 2026)
Code Intelligence and Coding Sessions Penetration Test Summary (May 2026)
Policies
Information Security Policy
Access Control Policy
Secure Development Policy
Vulnerability Management Policy
Other resources
Logical Architecture Diagram (October 2026)
AI Security Overview (April 2026)
AI Coding Security Overview (July 2026)
Data Resilience and Recovery Overview (July 2026)
View 1 more
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 16 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 10 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 30 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Subprocessors
View all
Google LLC • Cloud provider, artificial intelligence, collaboration / productivity
United States, European Union
Cloudflare, Inc. • Cloud provider
Global
Datadog, Inc. • Cloud monitoring
United States
Functional Software Inc (Sentry) • Cloud monitoring
United States
Updates
View all
Incident
Linear response to Fireworks AI security incident
Published November 10, 2026
Fireworks AI, one of Linear's AI inference providers, disclosed a security incident in October 2026.
We have completed an initial review of possible impact to Linear, with no customer data exposure identified.
In summary:
Fireworks is a Linear subprocessor for AI inference, but Linear workspaces do not use Fireworks by default.
The default Linear coding sessions model is not a Fireworks-hosted model, and workspaces that use other models in coding sessions send no data to Fireworks.
Workspaces that enable Linear's coding sessions feature and select an open-source model (GLM 5.3, GLM 5.3 Flash, or the "Auto" open-source option) use Fireworks for inference, with zero data retention explicitly enabled.
Fireworks indicated that the incident affected Linear's resource metadata, billing information, and some incomplete model weights and datasets. We do not upload model weights or datasets to Fireworks.
Fireworks explicitly stated that inference was not affected.
Fireworks says it has notified every affected customer, and we have not received a notification.
We have proactively disabled the Fireworks-hosted models highlighted above and have notified customers who had coding sessions configured that used them.
We have no known customer data exposure at this time, continue to monitor ongoing investigations, and will take appropriate actions if the facts change.
General
FedRAMP 20x progress update (Q4 2026)
Published October 15, 2026
Linear is listed on the FedRAMP MarketplaceOpens in new tab (FR2700555844) in the Initial Implementation phase. We’re pursuing FedRAMP 20x certification for our existing production offering, with no separate government environment.
Goals and milestones
Completed: Listed on the FedRAMP Marketplace (Initial Implementation)
Near term: FedRAMP 20x Class A certification, building on our SOC 2 Type II
Next: FedRAMP 20x Class C certification, targeted for 2027
We’ll post progress here at least once a quarter. For questions, contact security@linear.app.
General
Subprocessor list addition
Published September 23, 2026
We have added TypeSafe AI, IncOpens in new tab to our subprocessors list, available at https://trust.linear.app/subprocessorsOpens in new tab. Subprocessors are adjusted from time to time in order to support our business, and no action is required on your part.
General
Subprocessor list addition and updated Trust Center content
Published August 19, 2026
We have added The Pierre Computer Company, IncOpens in new tab to our subprocessors list, available at https://trust.linear.app/subprocessorsOpens in new tab. Subprocessors are adjusted from time to time in order to support our business, and no action is required on your part.
Also, we've recently published updated penetration test summaries and several security-related overview documents to our Trust Center, available in the Resources section.
Subprocessors
Linear
LinearOpens in new tab is the product development system for teams and agents, purpose-built for planning and building products, designed for the AI era.
We hold ourselves to a commitment to qualityOpens in new tab. To us, security is an essential part of that quality - not a layer that we add later, but something we build in from the start.
The content available here details how we address security within our product, our supporting technology, and our operational practices.
trust@linear.app
Privacy PolicyOpens in new tab
Filter by
Compliance
ISO 27001:2022
SOC 2 Type II
GDPR
HIPAA
Resources
View all
Compliance
ISO 27001 Certificate (April 2026)
ISMS Statement of Applicability (March 2026)
SOC 2 Type II (November 2025)
SOC 2 Bridge Letter (October 2026)
Miscellaneous
Certificate of Insurance (COI)
W-9 2026
Linear Orbit, Inc. Tax Registration
Penetration tests
External Penetration Test Summary (March 2026)
Code Intelligence and Coding Sessions Penetration Test Summary (May 2026)
Policies
Information Security Policy
Access Control Policy
Secure Development Policy
Vulnerability Management Policy
Other resources
Logical Architecture Diagram (October 2026)
AI Security Overview (April 2026)
AI Coding Security Overview (July 2026)
Data Resilience and Recovery Overview (July 2026)
View 1 more
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 16 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 10 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 30 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Subprocessors
View all
Google LLC • Cloud provider, artificial intelligence, collaboration / productivity
United States, European Union
Cloudflare, Inc. • Cloud provider
Global
Datadog, Inc. • Cloud monitoring
United States
Functional Software Inc (Sentry) • Cloud monitoring
United States
Updates
View all
Incident
Linear response to Fireworks AI security incident
Published November 10, 2026
Fireworks AI, one of Linear's AI inference providers, disclosed a security incident in October 2026.
We have completed an initial review of possible impact to Linear, with no customer data exposure identified.
In summary:
Fireworks is a Linear subprocessor for AI inference, but Linear workspaces do not use Fireworks by default.
The default Linear coding sessions model is not a Fireworks-hosted model, and workspaces that use other models in coding sessions send no data to Fireworks.
Workspaces that enable Linear's coding sessions feature and select an open-source model (GLM 5.3, GLM 5.3 Flash, or the "Auto" open-source option) use Fireworks for inference, with zero data retention explicitly enabled.
Fireworks indicated that the incident affected Linear's resource metadata, billing information, and some incomplete model weights and datasets. We do not upload model weights or datasets to Fireworks.
Fireworks explicitly stated that inference was not affected.
Fireworks says it has notified every affected customer, and we have not received a notification.
We have proactively disabled the Fireworks-hosted models highlighted above and have notified customers who had coding sessions configured that used them.
We have no known customer data exposure at this time, continue to monitor ongoing investigations, and will take appropriate actions if the facts change.
General
FedRAMP 20x progress update (Q4 2026)
Published October 15, 2026
Linear is listed on the FedRAMP MarketplaceOpens in new tab (FR2700555844) in the Initial Implementation phase. We’re pursuing FedRAMP 20x certification for our existing production offering, with no separate government environment.
Goals and milestones
Completed: Listed on the FedRAMP Marketplace (Initial Implementation)
Near term: FedRAMP 20x Class A certification, building on our SOC 2 Type II
Next: FedRAMP 20x Class C certification, targeted for 2027
We’ll post progress here at least once a quarter. For questions, contact security@linear.app.
General
Subprocessor list addition
Published September 23, 2026
We have added TypeSafe AI, IncOpens in new tab to our subprocessors list, available at https://trust.linear.app/subprocessorsOpens in new tab. Subprocessors are adjusted from time to time in order to support our business, and no action is required on your part.
General
Subprocessor list addition and updated Trust Center content
Published August 19, 2026
We have added The Pierre Computer Company, IncOpens in new tab to our subprocessors list, available at https://trust.linear.app/subprocessorsOpens in new tab. Subprocessors are adjusted from time to time in order to support our business, and no action is required on your part.
Also, we've recently published updated penetration test summaries and several security-related overview documents to our Trust Center, available in the Resources section.
Read more about Subprocessor list addition and updated Trust Center content
Linear
LinearOpens in new tab is the product development system for teams and agents, purpose-built for planning and building products, designed for the AI era.
We hold ourselves to a commitment to qualityOpens in new tab. To us, security is an essential part of that quality - not a layer that we add later, but something we build in from the start.
The content available here details how we address security within our product, our supporting technology, and our operational practices.
trust@linear.app
Privacy PolicyOpens in new tab
Filter by
Compliance
ISO 27001:2022
SOC 2 Type II
GDPR
HIPAA
Resources
View all
Compliance
ISO 27001 Certificate (April 2026)
ISMS Statement of Applicability (March 2026)
SOC 2 Type II (November 2025)
SOC 2 Bridge Letter (October 2026)
Miscellaneous
Certificate of Insurance (COI)
W-9 2026
Linear Orbit, Inc. Tax Registration
Penetration tests
External Penetration Test Summary (March 2026)
Code Intelligence and Coding Sessions Penetration Test Summary (May 2026)
Policies
Information Security Policy
Access Control Policy
Secure Development Policy
Vulnerability Management Policy
Other resources
Logical Architecture Diagram (October 2026)
AI Security Overview (April 2026)
AI Coding Security Overview (July 2026)
Data Resilience and Recovery Overview (July 2026)
View 1 more
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 16 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 10 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 30 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Subprocessors
View all
Google LLC • Cloud provider, artificial intelligence, collaboration / productivity
United States, European Union
Cloudflare, Inc. • Cloud provider
Global
Datadog, Inc. • Cloud monitoring
United States
Functional Software Inc (Sentry) • Cloud monitoring
United States
Updates
View all
Incident
Linear response to Fireworks AI security incident
Published November 10, 2026
Fireworks AI, one of Linear's AI inference providers, disclosed a security incident in October 2026.
We have completed an initial review of possible impact to Linear, with no customer data exposure identified.
In summary:
Fireworks is a Linear subprocessor for AI inference, but Linear workspaces do not use Fireworks by default.
The default Linear coding sessions model is not a Fireworks-hosted model, and workspaces that use other models in coding sessions send no data to Fireworks.
Workspaces that enable Linear's coding sessions feature and select an open-source model (GLM 5.3, GLM 5.3 Flash, or the "Auto" open-source option) use Fireworks for inference, with zero data retention explicitly enabled.
Fireworks indicated that the incident affected Linear's resource metadata, billing information, and some incomplete model weights and datasets. We do not upload model weights or datasets to Fireworks.
Fireworks explicitly stated that inference was not affected.
Fireworks says it has notified every affected customer, and we have not received a notification.
We have proactively disabled the Fireworks-hosted models highlighted above and have notified customers who had coding sessions configured that used them.
We have no known customer data exposure at this time, continue to monitor ongoing investigations, and will take appropriate actions if the facts change.
General
FedRAMP 20x progress update (Q4 2026)
Published October 15, 2026
Linear is listed on the FedRAMP MarketplaceOpens in new tab (FR2700555844) in the Initial Implementation phase. We’re pursuing FedRAMP 20x certification for our existing production offering, with no separate government environment.
Goals and milestones
Completed: Listed on the FedRAMP Marketplace (Initial Implementation)
Near term: FedRAMP 20x Class A certification, building on our SOC 2 Type II
Next: FedRAMP 20x Class C certification, targeted for 2027
We’ll post progress here at least once a quarter. For questions, contact security@linear.app.
General
Subprocessor list addition
Published September 23, 2026
We have added TypeSafe AI, IncOpens in new tab to our subprocessors list, available at https://trust.linear.app/subprocessorsOpens in new tab. Subprocessors are adjusted from time to time in order to support our business, and no action is required on your part.
General
Subprocessor list addition and updated Trust Center content
Published August 19, 2026
We have added The Pierre Computer Company, IncOpens in new tab to our subprocessors list, available at https://trust.linear.app/subprocessorsOpens in new tab. Subprocessors are adjusted from time to time in order to support our business, and no action is required on your part.
Also, we've recently published updated penetration test summaries and several security-related overview documents to our Trust Center, available in the Resources section.