generated: '2026-08-13'
method: searched
probe: true
url: https://security.linkedin.com/trust-and-compliance
name: LinkedIn Trust and Compliance
smart_trust_center: >-
  LinkedIn operates a "Smart Trust Center" portal that gives customers access to the latest security
  reports and documents, including the ISO certificates and the SOC 2 report. Access requires creating an
  account on the portal; reports are not published anonymously. The portal is English-only.
program: >-
  LinkedIn maintains an Information Security Program to ensure the confidentiality, integrity and
  availability of its computer and data communication systems while meeting legislative, industry and
  contractual requirements.
certifications:
- name: ISO 22301
  standard: Business Continuity Management Systems
  scope: Products and services on the LinkedIn platform
  note: LinkedIn's ISO 22301 certification is stated as valid until May 2026.
- name: ISO 27001
  standard: Information Security Management System (ISMS)
  scope: Products and services on the LinkedIn platform; certificates listed per product line — Learning Solutions, Marketing Solutions, Sales Solutions, Talent Solutions.
- name: ISO 27018
  standard: Privacy protections for processing of personal information by cloud service providers
  scope: Products and services on the LinkedIn platform
- name: SOC 2
  standard: AICPA Service Organization Control 2 (trust service principles and criteria)
  scope: LinkedIn Learning Solutions, Marketing Solutions, Sales Solutions and Talent Solutions; a separate SOC 2 report covers the Glint platform.
  access: Create an account on the LinkedIn Smart Trust Center to obtain the report.
- name: PCI DSS
  standard: Payment Card Industry Data Security Standard
  scope: Systems processing, storing or transmitting payment card data; assessed annually by a third-party QSA which issues an Attestation of Compliance.
  access: Reports are not shared with the public.
referenced_standards:
- name: ISO 27002
  note: Cited as the source of the security controls underpinning the ISO 27001 ISMS.
data_protection:
  dpa: https://www.linkedin.com/legal/l/dpa
  privacy_policy: https://www.linkedin.com/legal/privacy-policy
  regimes: [GDPR, CCPA, EU Standard Contractual Clauses (Modules 1 and 2), UK Addendum]
  supervisory_authority: Data Protection Commission of Ireland (competent authority under SCC Clause 13)
  iso_mapping_commitment: >-
    The DPA commits LinkedIn to provide, on request, a mapping of its security policies to the controls
    set out in ISO/IEC 27001, and to provide an annual Service Organization Control report from an
    accredited auditor.
related_pages:
  vulnerability_disclosure: https://security.linkedin.com/vulnerability-disclosure
  security_practices: https://security.linkedin.com/
  safety_center: https://safety.linkedin.com/
  transparency: https://about.linkedin.com/transparency
evidence:
- source: https://security.linkedin.com/trust-and-compliance
  http_status: 200
  fetched: '2026-08-13'
  keywords: [ISO 22301, ISO 27001, ISO 27018, ISO 27002, SOC 2, PCI DSS, Smart Trust Center, Compliance Certifications]
- source: https://www.linkedin.com/legal/l/dpa
  http_status: 200
  fetched: '2026-08-13'
  keywords: [ISO/IEC 27001, Service Organization Control report, PCI DSS, GDPR, SCCs]
  note: The DPA security exhibit names https://security.linkedin.com/trust-and-compliance as the canonical location for LinkedIn's security certifications.
- source: https://security.linkedin.com/
  http_status: 200
  fetched: '2026-08-13'
  note: 301-redirects to https://about.linkedin.com/transparency at the root; the trust content lives at /trust-and-compliance.