{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"pulumi","name":"Pulumi","domain":"pulumi.com","category":"Cloud and hosting","one_liner":"Pulumi is an open-source infrastructure as code platform that helps humans and agents build and manage cloud infrastructure with real","trust_center_url":"https://www.pulumi.com/","security_page_url":null,"url":"https://certreports.com/vendors/pulumi/security","last_verified_at":"2026-09-21T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on custom as of 21 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"custom","url":"https://certreports.com/vendors/pulumi/soc-2","evidence":[{"source_type":"trust_center","source_name":"Pulumi trust centre (Custom)","url":"https://www.pulumi.com/","fetched_at":"2026-09-21 23:04:06.447548+00","content_hash":"86e4d277482cbc8b7e55416f36ccbbb6b4e41eb2ae1c45476c0fd2feb8231b0f","wayback_url":null,"quote":"SOC 2 Type II","confidence":1}]}],"brief":{"summary":"Pulumi, a cloud and hosting vendor, states SOC 2 Type II on its trust centre as of 21 Sep 2026. This SOC 2 Type II claim is the only framework recorded for Pulumi in the evidence as of 21 Sep 2026. No auditor name is included with the SOC 2 Type II claim as of 21 Sep 2026. No report period end or issuance date is included with the SOC 2 Type II claim as of 21 Sep 2026. The SOC 2 Type II claim for Pulumi as of 21 Sep 2026 is a vendor statement from its trust centre rather than a registry listing.","bullets":["SOC 2 Type II: vendor-stated on trust centre, no auditor captured (as of 21 Sep 2026).","SOC 2 Type II: no report period end or issuance date captured (as of 21 Sep 2026).","Evidence set for Pulumi covers a single vendor-stated framework as of 21 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-22 10:07:27.056187+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/pulumi/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-22T10:08:54.825Z"}