Snapshot 258315
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Glean Welcome to the Glean Trust Center. Glean was built from the ground up by an experienced team with security, privacy, and compliance prioritized from day one. We follow modern security principles - including the zero trust security model, strong authentication practices, the principle of least privilege, and a shift-left approach that incorporates security into our design, development, and ops. security@glean.com Privacy PolicyOpens in new tab Glean is committed to building trust through rigorous security, transparent architecture, and proactive vulnerability management. We continually enhance our systems to protect your data and ensure compliance with industry standards. Learn more about our security practices, infrastructure design, and network architecture in our Security & Architecture Hub: https://docs.glean.com/security/homeOpens in new tab Compliance SOC 2 ISO 27001:2022 ISO/IEC 42001:2023 HIPAA GDPR Resources View all Reports & Certifications Glean SOC 2 Type 2 Report Glean ISO 27001 Certificate Glean ISO 42001 Certificate Glean HIPAA Assessment Report View 2 more Policies Information Security Policy Technical Vulnerability Management Policy Data Management Policy Incident Response Policy View 6 more Other Glean Security FAQ Glean Security and Privacy Standard Glean Information Security Roles and Responsibilities Glean CAIQv4 Questionnaire GCP View 4 more Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 15 more Infrastructure security controls Organizational security Asset disposal procedures utilized Portable media encrypted Employee background checks performed View 9 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Cybersecurity insurance maintained Production multi-availability zones established View 29 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established View 19 more Data and privacy controls Subprocessors View all Google LLC • Cloud Service Provider / LLM Provider Amazon Web Services • Cloud Service Provider / LLM Provider This is an optional sub-processor for customers who choose to use AWS. Microsoft Corporation • Cloud Service Provider / LLM Provider Intercom, Inc. • Cloud-based Customer Support Services United States Updates View all Security RediShell Vulnerability Update (CVE-2025-49844) Published October 13, 2025 Recently, Redis disclosed CVE-2025-49844, a critical vulnerability with a CVSS score of 10.0 that could allow users to execute arbitrary code through specially crafted Lua scripts. Glean has applied the security patch to all versions of Redis that we deploy to customers. We expect this fix to be rolled out with the upcoming release of Glean this week (week of Oct 13). It's important to note that Redis in Glean deployments is only exposed internally to other services within the Glean infrastructure and is never directly accessible to end users or the internet, so the risk of exploitation is minimal. General Ingress Nightmare (CVE-2025-1974) Vulnerability Update: Not Applicable to Glean systems Published April 11, 2025 Recently, a critical vulnerability known as IngressNightmare (CVE-2025-1974) was disclosed, affecting the Ingress-NGINX controller used in Kubernetes environments. This vulnerability, with a CVSS score of 9.8, allows unauthenticated remote code execution and poses significant risks to Kubernetes clusters utilising Ingress-NGINX. However, we would like to inform our customers that this vulnerability does not impact Glean systems as we do not use NGINX or the affected ingress controller in our infrastructure. We remain committed to maintaining the highest standards of security and will continue to monitor developments in this area to ensure the safety of our systems and data. If you have further questions or concerns, please feel free to reach out to your Glean Account Executive or the Glean support team. General Stay Updated with Glean’s Trust Center! Published April 11, 2025 Subscribe to receive notifications about security bulletins, compliance updates and product security advisories. Here, we will share updates on vulnerabilities, certifications and our latest security enhancements.