Snapshot 258145
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Qumulo Trust Qumulo is dedicated to helping our customers understand how we secure customer information, protect individual privacy, and comply with security and privacy laws and standards. If you have any questions that are not answered on this page, please contact security@qumulo.com. You can visit the main Qumulo website at www.qumulo.comOpens in new tab. security@qumulo.com Privacy PolicyOpens in new tab Filter by Compliance SOC 2 GDPR HIPAA FIPS 140-3 Resources View all Product Security Documentation Secure Cloud Monitoring, Management, and Support with Qumulo Secure Configuration Guides Local User Account Password Policy Secure Drive and Node Decommissioning in Qumulo Clusters On-Premises Qumulo Core Secure Configuration Guide Cloud Native Qumulo (CNQ) Secure Configuration Guide Compliance Qumulo Enterprise SOC 2 Type 2 Report for Period Ending November 2025 Qumulo Nexus Type 2 SOC 2 Report for the period ending November 2025 Mapping Qumulo Controls to ISO 27001 Standard Country of Origin Letter of Attestation View 7 more Policies HIPAA Compliance Policy Operations Security Policy (EN) View 9 more Assessments BCDR Plan Summary FY24.pdf Samba Vulnerability Impact Analysis for Qumulo's Proprietary SMB Stack Annual Pen Testing Questionnaires HECVAT for Qumulo Core and Cloud Native Qumulo CAIQ v4.1 for Cloud Native Qumulo (CNQ) CAIQ v4.1 for Azure Native Qumulo (ANQ) SBOM Qumulo_Core_SBOM_SPDX_7.10.1.json Qumulo_Core_SBOM_CycloneDX_7.10.1.json Controls View all Infrastructure security Unique production database authentication enforced Unique account authentication enforced Access control procedures established View 7 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Employee background checks performed View 7 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Continuity and Disaster Recovery plans established Continuity and disaster recovery plans tested Cybersecurity insurance maintained View 32 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Microsoft Azure • Cloud provider United States Azure Native Qumulo Service Offering Datadog • Cloud monitoring United States Service monitoring and alerting Elastio • Security Reston, Virginia Cloud-native ransomware recovery and data security. Google Workspace • Document management United States Email and Collaboration FAQ View all Updates View all Privacy Updates to our Subprocessor List Published May 21, 2026 Effective immediately (May 2026) we have updated the list of sub-processors used to process personal data in connection with Azure Native Qumulo (ANQ) and Nexus. These sub-processors will assist us in enhancing your overall experience. We have carefully selected these sub-processors to meet the highest privacy and security standards. The new subprocessors are: SendGrid Statsig Elastio M3ter More details about our full list of subprocessors are available here: https://trust.qumulo.com/subprocessorsOpens in new tab If you have any questions about these changes, do not hesitate to contact us at dataprivacyoffice@qumulo.com. Compliance New SOC 2 Reports available! Published May 11, 2026 Qumulo's SOC 2 Type 2 ReportsOpens in new tab for the period of November 2024 through November 2025 are now available. Contact security@qumulo.com with any questions. View the Nexus SOC 2 Type 2 Report hereOpens in new tab. View the Enterprise SOC 2 Type 2 Report hereOpens in new tab. Security Report available validating ransomware prevention with Qumulo and anti-virus! Published August 26, 2024 A new independent third party report, commissioned by Superna, shows that anti-virus deployed in a Qumulo environment will instantly stop multiple types of ransomware attacks! Get the resource here: Report on Superna and QumuloOpens in new tab Privacy Notice of Material Change to Privacy Notice Published July 16, 2024 We have updated our Privacy Notice, effective from July 1, 2024, to clarify how we collect, use, disclose and otherwise process personal data in connection with our Services. If you have any questions about these changes, do not hesitate to contact us at dataprivacyoffice@qumulo.com To acquire prior versions of this Privacy Notice, contact dataprivacyoffice@qumulo.com.