{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"github","name":"GitHub","domain":"github.com","category":"Developer tools","one_liner":"GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code","trust_center_url":"https://github.com/trust","security_page_url":null,"url":"https://certreports.com/vendors/github/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 19 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2018-10-04","expires_at":null,"period_start":null,"period_end":null,"auditor":"Coalfire Systems, Inc.","impact_level":"LI-SaaS","as_of":"2026-09-19","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/github/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR1812058188","fetched_at":"2026-09-19 08:30:01.700532+00","content_hash":"b2bb3e031fda16f1f3201a5640ae64a639a15e4997f9d1ca43ef13a2942600e6","wayback_url":null,"quote":"GitHub - GitHub Enterprise Cloud: FedRAMP Authorized","confidence":1}]}],"brief":{"summary":"GitHub is listed in the FedRAMP registry as FedRAMP Authorized, as of 19 Sep 2026. The FedRAMP authorization for GitHub was issued 4 Oct 2018, as of 19 Sep 2026. The FedRAMP listing for GitHub names Coalfire Systems, Inc. as the assessing auditor, as of 19 Sep 2026. No expiry date is recorded for GitHub's FedRAMP listing, as of 19 Sep 2026. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA or GDPR for GitHub, as of 19 Sep 2026.","bullets":["FedRAMP - listed in the FedRAMP registry as Authorized since 4 Oct 2018, as of 19 Sep 2026 (auditor: Coalfire Systems, Inc.)","No expiry date recorded for GitHub's FedRAMP listing, as of 19 Sep 2026","No SOC 2, ISO/IEC 27001, HIPAA or GDPR evidence found for GitHub, as of 19 Sep 2026"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 10:42:42.467182+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T12:35:16.957Z"}