Snapshot 7475

Document
Trust center
URL
https://trust.globalrelay.com/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
346817 bytes
SHA-256 (raw)
fbd0b82b55616d2c29c43d36b4cca4cf4f3cf6553efbf86732572053e4ef4db1
SHA-256 (normalized text)
ca7a620b09e111a45536a6d97db542d9f2da8f3bc07a60d0c2f8ec61d0b64f38

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Global Relay
Search the Trust Center...
Ctrl +K
Quick links
Website URL
Quick links
Website URL
Badges
SOC 2 Type II
ISO 27001
GDPR
CCPA
Our Philosophy
Global Relay is committed to safeguarding the confidentiality, integrity, and availability of customer data. We align our security program with ISO 27001 and SOC 2 standards. Our security strategy is closely tied to customer needs, contractual and legal requirements, and our business goals.
As part of our security program, we aim to:
Identify, assess, and contain risks
Build credibility and trust with and customers and partners
Deliver secure, reliable services that meet the stringent requirements of regulated industries like finance, insurance, and government
Provide appropriate awareness of information security within Global Relay
Continually improve security by reviewing and acting on customer feedback, audit results, test results, and other sources of information
Our defense in depth measures include physical security, intrusion detection and prevention, redundant systems, data encryption, software security testing, 24x7 monitoring, and well-trained employees.
Laurence Lafond
Chief Information Security Officer
Coming Soon
We are pleased to share that our SOC 2 Type II audit for the period of May 1, 2025 – April 30, 2026 has been successfully completed. The final report will be available on our Customer Trust portal by
Quick Summary
One or more annual third-party audit(s)
Has a formal mobile device management (MDM) program
Annual third-party penetration testing
Has a disaster recovery plan
Has cyber insurance
Will enter into a DPA
Deletes customer data on request
Uses a centralized IAM solution (SSO) to manage employee access
Has a privacy policy
Documents & Knowledge Base FAQs
Announcements
Aug 20, 2025, 12:55 UTC
New SOC 2 Reports
Global Relay SOC 2 reports for the period May 1, 2024, to April 30, 2025, are now available on the trust portal.
Aug 2, 2025, 12:55 UTC
SharePoint Vulnerability
Global Relay does not use SharePoint and hence we are unaffected by this incident.
Jul 20, 2024, 13:00 UTC
CrowdStrike Outage
Global Relay is closely following the ongoing worldwide outage situation caused by an issue with CrowdStrike cybersecurity software. We are not currently experiencing any impact to Global Relay services and will keep customers up to date if circumstances change.
Jun 7, 2024, 13:00 UTC
Snowflake Targeted Campaign
Global Relay is aware of the cyberattack campaign targeting Snowflake customer accounts. Global Relay does not use Snowflake and isn't exposed to this campaign.
Jan 23, 2024, 14:00 UTC
Ivanti Vulnerabilities
Global Relay is aware of CVE-2023-46805 and CVE-2024-21887, vulnerabilities affecting Ivanti Connect Secure and Ivanti Policy Secure. Global Relay doesn't use these Ivanti products and isn't affected by these vulnerabilities.
Oct 28, 2023, 13:00 UTC
Updated Certificate of Insurance
An updated certificate of insurance (COI) is now available on the trust portal. The new COI covers the period October 27, 2023 to October 27, 2024.
Oct 26, 2023, 13:00 UTC
2023 Business Continuity Exercise
The 2023 business continuity exercise was conducted on October 4, 2023. A summary is now available on the trust portal.
Oct 17, 2023, 13:00 UTC
Confluence Data Center and Server Vulnerability
Global Relay is aware of CVE-2023-22515, a broken access control vulnerability in Confluence Data Center and Server. Global Relay isn't affected by this vulnerability.
Oct 17, 2023, 13:00 UTC
WS_FTP Server Vulnerabilities
Global Relay is aware of recently discovered vulnerabilities in WS_FTP Server (CVE-2023-42657 and CVE-2023-40044). Global Relay doesn't use WS_FTP Server and isn't affected by these vulnerabilities.
Sep 8, 2023, 13:00 UTC
2023 Penetration Test Report Available
The 2023 independent penetration test report is now available in the trust portal.
Aug 29, 2023, 13:00 UTC
Barracuda Email Security Gateway Vulnerability
Global Relay is aware of CVE-2023-2868, a remote command injection vulnerability in the Barracuda Email Security Gateway appliance. Global Relay doesn't use Barracuda Email Security Gateway and isn't affected by this vulnerability.
Aug 5, 2023, 13:00 UTC
New SOC 2 Reports Available
Global Relay SOC 2 reports for the period May 1, 2022 to April 30, 2023 are now available on the trust portal.
Jul 26, 2023, 13:00 UTC
Citrix ADC and Gateway Vulnerabilities
Global Relay is aware of CVE-2023-3519, CVE-2023-3466, and CVE-2023-3467. We don't use Citrix NetScaler ADC or Gateway products and aren't affected by these vulnerabilities.
Jun 23, 2023, 00:57 UTC
MOVEit Transfer Vulnerability
Global Relay is aware of CVE-2023-35708, a privilege escalation vulnerability in Progress Software's MOVEit Transfer product. Global Relay doesn't use MOVEit Transfer and is not affected by this vulnerability.
What we offer
Global Relay Archive
Global Relay Archive is a SaaS solution for archiving, surveillance, and eDiscovery of ecomms, voice, files, and trade data. Configurable workspaces and workflows put data in the hands of the right people—from compliance officers, to legal counsel, to an employee looking for a critical email.
Typical data access: Corporate communications (e.g. email, IM, social media, text messaging), corporate files (e.g. email attachments, Google Drive files), trade tickets (e.g. Refinitiv FX tickets), basic employee information (e.g. name, corporate email address, department)
Global Relay App
Global Relay App is a multi-channel messaging solution for compliant communications. Supported messaging channels include text (SMS/MMS), WhatsApp, voice calls, and instant messaging. All messages are preserved in Global Relay Archive for surveillance and eDiscovery.
Typical data access: Corporate communications (e.g. text messaging, voice calls, WhatsApp messages, attachments), basic employee information (e.g. name, corporate email address, business phone number)
Powered by Conveyor, the first end-to-end customer trust platform.
Learn more