Skip to content
Attested.
VendorsDev tools7h ago
Vendor · Dev tools

GitHubCompliance, certifications and attestations

Certifications held, by family7 held
Headquarters
San Francisco, United States
Founded
2007
Website
github.com
Trust center Company profile
7
Certifications held
3
Backed by a registry
7
Pieces of evidence
Sep 24, 2026
Last captured
Across fru.devPaydaysReleases

SOC reports

ISO standards

AI governance

US government

Health

Payments

Privacy

Cloud security

Regional

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Added or renewedUpgradedIn process or ReadyLapsed or removed
  1. AddedFedRAMP LowGitHub Enterprise Cloud
  2. AddedCSA STARFirst listed in the CSA STAR Registry
  3. In processFedRAMP LowGitHub Enterprise Cloud
  4. AddedData Privacy FrameworkGitHub

Evidence

Every source, what it says and when it was read.

SOC 11 source

Held · Type IIVendor compliance page
...compliance reports You can access GitHub's compliance reports in your enterprise settings. SOC 1, Type 2 SOC 2, Type 2 Cloud Security Alliance CAIQ self-assessment (CSA CAIQ - Level 1) ISO/IEC 27001:2022 certification...
Captured Sep 24, 2026Open source

SOC 21 source

Held · Type IIVendor compliance page
...reports You can access GitHub's compliance reports in your enterprise settings. SOC 1, Type 2 SOC 2, Type 2 Cloud Security Alliance CAIQ self-assessment (CSA CAIQ - Level 1) ISO/IEC 27001:2022 certification Cloud...
Captured Sep 24, 2026Open source

ISO/IEC 270011 source

HeldVendor compliance page
...1, Type 2 SOC 2, Type 2 Cloud Security Alliance CAIQ self-assessment (CSA CAIQ - Level 1) ISO/IEC 27001:2022 certification Cloud Security Alliance STAR certification (CSA STAR - Level 2) GitHub Bug Bounty Quarterly...
Captured Sep 24, 2026Open source

FedRAMP1 source

Held · LowFedRAMP Marketplace

GitHub Enterprise Cloud

FedRAMP Authorized, LI-SaaS impact; authorized 2018-10-04 (Agency); assessor Coalfire Systems, Inc.; 23 agency authorizations
Captured Sep 23, 2026Since Oct 4, 2018Open source

PCI DSS1 source

HeldVendor compliance page
...Bounty Quarterly reports GitHub.com Services Continuity and Incident Management Plan GitHub PCI DSS Attestation of Compliance Accessing compliance reports for your enterprise Navigate to your enterprise. For example,...
Captured Sep 24, 2026Open source

Data Privacy Framework1 source

HeldData Privacy Framework List

EU-US, UK extension, Swiss-US; non-HR data. GitHub

EU-US status: Active; certified since 2017-01-26; recertification due 2027-08-03; verification: Self-Assessment
Captured Sep 23, 2026Since Jan 26, 2017Renewal due Aug 3, 2027Open source

CSA STAR1 source

Held · Level 2CSA STAR Registry

CAIQ, certification

Listed as GitHub, Inc. since 2018-05-30; Level 2 (third-party audit)
Captured Sep 23, 2026Since May 30, 2018Open source

Compare with

GitHub vs Atlassian GitHub vs HashiCorp GitHub vs GitLab GitHub vs Postman GitHub vs Vercel GitHub vs Snyk

Weekly: vendors that gained or lost a certification, Wednesdays.