specification: API Commons Trust Center
specificationVersion: '0.1'
provider: JFrog Container Registry
providerId: jfrog-container-registry
generated: '2026-08-29'
modified: '2026-08-29'
method: searched
source: https://jfrog.com/trust/
description: >-
  JFrog publishes a public Trust center with named, individually-linked certifications.
  Every URL below was fetched on 2026-08-29 and returned HTTP 200 with the stated page title.
trust_center:
  url: https://jfrog.com/trust/
  status: 200
  title: JFrog Trust
certifications:
  - name: SOC 2 Type II
    url: https://jfrog.com/trust/certificate-program/soc-2-report/
    status: 200
    auditor: Ernst & Young
    note: JFrog states the report is validated and updated annually.
  - name: SOC 3
    url: https://jfrog.com/trust/certificate-program/soc-3-report/
    status: 200
  - name: ISO/IEC 27001
    url: https://jfrog.com/trust/certificate-program/certificate-iso-27001/
    status: 200
  - name: ISO/IEC 27701
    url: https://jfrog.com/trust/certificate-program/certificate-iso-27701/
    status: 200
    note: The privacy (PIMS) extension to ISO 27001/27002.
documents:
  - name: JFrog Cloud Data Security Addendum
    url: https://jfrog.com/jfrog-toms/
    status: 200
  - name: JFrog Trust FAQ
    url: https://jfrog.com/trust/faq/
    status: 200
  - name: JFrog Privacy Notice
    url: https://jfrog.com/privacy-policy/
    status: 200
infrastructure:
  hosting:
    - Amazon Web Services
    - Microsoft Azure
    - Google Cloud Platform
  source: https://jfrog.com/trust/faq/
notes:
  - >-
    ISO/IEC 27017 (cloud security controls) is cited by JFrog alongside 27001 and 27701 but no
    dedicated certificate page was located on jfrog.com/trust/certificate-program/ by this pass,
    so it is recorded as a claim without a probed URL and not listed as a certification above.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com