generated: '2026-08-05'
method: searched
probe: true
source: https://redcanary.com/trust-center/
urls:
- url: https://redcanary.com/trust-center/
  kind: marketing trust center page
- url: https://security.redcanary.com/
  kind: Conveyor-hosted trust portal (Red Canary Trust Center | Powered by Conveyor)
  dataroom: https://app.conveyor.com/datarooms/c2853f75-461c-4814-9b4c-5f08fd85b6de
contact: grc@redcanary.com
certifications:
- SOC 2 Type II
- ISO 27001:2013
- ISO 27701
- JOSCAR
- EU-U.S. Data Privacy Framework
- UK Extension to the EU-U.S. Data Privacy Framework
- Swiss-U.S. Data Privacy Framework
privacy_regimes:
- GDPR
- UK GDPR
- CCPA / CPRA
- PIPEDA
- FDPA
privacy:
  dpa: >-
    Data Protection Addendum available, documenting compliance with GDPR, UK GDPR,
    CCPA, CPRA, PIPEDA, FDPA and applicable Privacy Acts.
  privacy_policy: https://redcanary.com/privacy-policy/
subprocessors:
  public: false
  note: Subprocessor list is available to customers and prospects under NDA by request to grc@redcanary.com.
vulnerability_disclosure: https://redcanary.com/responsible-disclosure/
status_page: https://status.redcanary.com/
customer_compliance_support:
  url: https://docs.redcanary.com/docs/supported-standards-and-frameworks
  note: >-
    Control-family mappings showing how Red Canary monitoring supports CUSTOMER
    obligations under ISO 27001:2013, SOC, FedRAMP, PCI DSS, BSI C5, HIPAA,
    NIST 800-171 and CMMC. These are frameworks Red Canary helps customers satisfy —
    they are NOT certifications Red Canary itself holds, and must not be read as such.
x-false-credit-guard: >-
  The automated probe (0-working/probe-security-programs.py) first recorded HIPAA,
  FedRAMP, ISO 27017, ISO 27018 and CSA STAR from https://security.redcanary.com/.
  Those strings are real on that page but belong to OTHER vendors' tiles rendered in
  the Conveyor portal's directory carousel (Slack, Zendesk, Splunk, AWS). Red Canary's
  own record in the page's VENDOR_REPORT payload lists exactly:
  ["iso-27001","iso-27701","soc2-type-2","ccpa","eu-us-data-privacy","gdpr",
  "swiss-us-dpf","uk-extension-to-eu-us-dpf"], which matches the marketing trust center
  page. The keyword-derived list was discarded and this file was restored to the
  searched values. Do not re-run the probe over this file without re-verifying.
evidence:
- source: https://redcanary.com/trust-center/
  http_status: 200
  keywords:
  - soc 2 type ii
  - iso 27001:2013
  - iso 27701
  - joscar
  - data privacy framework
- source: https://security.redcanary.com/
  http_status: 200
  extracted: window.VENDOR_REPORT._embedded.canonical_asset.certifications
  value:
  - iso-27001
  - iso-27701
  - soc2-type-2
  - ccpa
  - eu-us-data-privacy
  - gdpr
  - swiss-us-dpf
  - uk-extension-to-eu-us-dpf
- source: https://redcanary.com/security/
  http_status: 200
  note: 301 to https://redcanary.com/trust-center/
- source: https://trust.redcanary.com/
  http_status: 0
  note: does not resolve
x-evidence:
  fetched: '2026-08-05'