Snapshot 9657
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content The Keeper Trust Center is designed to provide current and prospective customers access to our security and compliance resources and reports. All information is for internal use only. Access to any nonpublic information in the Keeper Trust center is subject to the confidentiality terms presented to you for acceptance following your approval by Keeper. Compliance SOC 2 SOC 3 ISO 27001:2022 ISO 27017 ISO 27018 GDPR CCPA FedRAMP High Rev. 5 Digital Operational Resilience Act NIS 2 Directive GovRAMP TX-RAMP Resources View all Financial 2023 Audited Financial Statement Bank Letter - Keeper U.S. Bank Letter - Keeper EMEA 2024 Audited Financial Statement View 2 more Compliance ISO 27001 - 27017 - 27018 Statement of Applicability (SoA) SIG Lite CCM and CAIQ v 4.0.1 View 14 more Security Testing BCP/DR Contingency & After Action Report - August 2025 PCI DSS Attestation of Scan Compliance Keeper's Internal Security Policies KSI Change Control Process KSI Personal Device Policy KSI Corporate Policy and Guidelines for Use of AI Tools KSI Candidate Selection Process View 19 more Privacy Diagrams Data Flow, Network Architecture & Application Architecture Diagrams Keeper Security GovCloud (KSGC) Keeper CMMC Controls AnalysisOpens in new tab KSGC Customer Responsibility Matrix (CRM ) - FedRAMP HighOpens in new tab Tax Documents Keeper Security EIN - SS4 Certificate of Incorporation - State of Delaware Keeper EMEA Tax Clearance Confirmation - 2026 Keeper EMEA Tax Residence Letter - 2026 View 1 more Accessibility HECVAT 4.0 Penetration Tests Keeper Admin Tool - Jan 2026 Keeper Vault Web & Desktop - Feb 2026 Keeper Android Mobile Penetration Test - March 27, 2026 Keeper Browser Extension QRC Penetration test - April 6, 2026 View 11 more Controls Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Salesforce • Email and account license information United States Amazon Web Services • Cloud hosting provider United States, Ireland, Germany, Australia, Canada, Japan Cloud Infrastructure (Isolated to Customer in specified region) Hubspot • Email address for marketing communications United States HelpScout • Website chatbot United States FAQ Updates View all Security Keeper Security Statement on Node Package Manager (NPM) Shai-Hulud Worm Compromise Published October 7, 2025 A recently identified malware is spreading through the Node Package Manager (NPM) ecosystem. This type of supply chain attack targets widely used software dependencies to reach downstream users and applications. Keeper Security is aware of the Shai Hulud NPM ecosystem worm and has not found any exposure in our systems or applications. Keeper continues to monitor its platform and work with our critical vendors to ensure our products are not impacted by this incident. Customer data remains protected by Keeper’s zero-knowledge architecture. Security Keeper Security's Response to the "Clickjacking" report from DEFCON 2025 Published September 8, 2025 At DEF CON 33, a researcher presented on Clickjacking (UI redressing), where users can be tricked into clicking hidden UI elements. The researcher showed a scenario in which a malicious site could prompt a user to click on a transparent password manager autofill interface. Keeper already blocks cross-domain autofill but collaborated with the researcher to further strengthen the browser extension as described below. We value the security research community and regularly collaborate with researchers to help protect our customers. For more information, please see https://docs.keeper.io/en/release-notes/keeper-security/security-advisories/def-con-2025Opens in new tab Security Keeper Security Statement on the Salesforce Drift Incident Published September 4, 2025 Recently, security researchers uncovered a large-scale data theft campaign carried out to breach the sales automation platform Salesloft to steal OAuth and refresh tokens associated with the Drift Artificial Intelligence (AI) chat agent. Keeper is unaffected by the incident, as Keeper has never used the Drift product. Out of an abundance of caution, Keeper’s security team compared published Indicators of Compromise (IOCs) against our Salesloft logs and found no activity indicative of compromise. Keeper is closely monitoring developments and will continue taking proactive measures to ensure our systems remain secure. For more information, please see https://docs.keeper.io/en/release-notes/keeper-security/security-advisoriesOpens in new tab