generated: '2026-07-18'
method: searched
source: https://www.blackduck.com/company/legal/security-commitments.html
url: https://www.blackduck.com/company/legal/security-commitments.html
certifications:
- SOC 2 Type 2
- SOC 3 Type 2
- ISO 27001
- ISO 27017
- ISO 26262
- CSA STAR Self-Assessment
- TISAX (Assessment Level 2)
- TX-RAMP Level 2
frameworks:
- ISO 27001
- ISO 27002
- NIST SP 800-53
- NIST CSF
scope: 'Black Duck Software Inc. operates an ISMS conforming to ISO/IEC 27001:2022 covering its IT
  and Cloud Operations processes supporting the Managed Services Portal, Polaris (Classic and Next
  Generation), and Black Duck applications.'
evidence:
- source: https://www.blackduck.com/company/legal/security-commitments.html
  keywords: [soc 2 type 2, soc 3, iso 27001, iso 27017, csa star, tisax, tx-ramp, nist]
- source: https://www.blackduck.com/content/dam/black-duck/en-us/documents/21-Black%20Duck%20Software-2025-ISO%2027001_2022-AUDIT%20Recertification%20and%20Transition-Certificate%20ANAB.pdf
  kind: iso-27001-certificate