Snyk

Developer security platform for finding and fixing vulnerabilities in code, containers, and cloud infrastructure.

✓ 7 of 32 frameworks

Security & General Standards
SOC 2 Type II	✓ Annual SOC 2 Type II attestation report
SOC 3	? Not documented in trust center
SOC 1 Type II	? Not documented in trust center
ISO 27001 (Information Security Management)	✓ ISO/IEC 27001:2022
ISO 27017 (Cloud Security)	✓ ISO/IEC 27017:2015
ISO 27018 (Cloud Privacy)	? Not documented in trust center
ISO 27701 (Privacy Information Management)	? Not documented in trust center
ISO 42001 (AI Management Systems)	? Not documented in trust center
ISO 9001 (Quality Management)	? Not documented in trust center
CSA STAR (Cloud Security Alliance)	? Not documented in trust center
HITRUST CSF	? Not documented in trust center
BSI C5 (German Cloud Security)	? Not documented in trust center
Privacy & Data Transfer
GDPR (EU)	✓
CCPA / CPRA (California)	✓
UK GDPR	? Not documented in trust center
LGPD (Brazil)	? Not documented in trust center
PIPEDA (Canada)	? Not documented in trust center
DPDP Act (India)	? Not documented in trust center
PIPL (China)	? Not documented in trust center
EU-US Data Privacy Framework	? Not documented in trust center
Swiss-US Data Privacy Framework	? Not documented in trust center
Global CBPR (APEC)	? Not documented in trust center
Global PRP (APEC)	? Not documented in trust center
Industry & Government
HIPAA (US Healthcare)	? Not documented in trust center
PCI DSS (Payment Card Industry)	✓ PCI DSS SAQ-A
FedRAMP (US Federal)	✓ FedRAMP Rev. 5
StateRAMP / TX-RAMP (US State)	? Not documented in trust center
DORA (EU Finance)	? Not documented in trust center
CJIS (US Law Enforcement)	? Not documented in trust center
FINRA (US Broker-Dealers)	? Not documented in trust center
IRAP (Australian Government)	? Not documented in trust center
Emerging & Strategic
NIST CSF (Cybersecurity Framework)	? Not documented in trust center