Skip to main content
Automattic logo

Automattic

Security and trust center evidence

WordPress VIP is the enterprise content platform trusted by 1,300+ organizations including TIME, Salesforce, and

wpvip.comLast verified 2 Nov 2026
Vendor website Are you Automattic?

Summary

FedRAMP mark, CertReports state Verified as of 2 Nov 2026FedRAMPVerifiedEU-US Data Privacy Framework mark, CertReports state Verified as of 2 Nov 2026DPFVerified

Automattic has 2 registry-verified rows in the CertReports index, last verified 2 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 2 Nov 2026, CertReports holds 2 registry-verified rows for Automattic, drawn from FedRAMP Marketplace and the Data Privacy Framework list. Automattic is listed in the FedRAMP Marketplace for FedRAMP (FedRAMP Authorized), dated 12 Mar 2025, assessed by Fortreum, LLC. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA and GDPR as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.

  • FedRAMP: FedRAMP Authorized, verified as of 2 Nov 2026
  • EU-US Data Privacy Framework: Active: UK Extension Certification, SW-US Certification, EU-US Certification, verified as of 2 Nov 2026

Facts only, each dated; nothing here is inferred, scored or advised.

Evidence count

2verified rows

content managemententerprise cmspublishing platformwordpress hosting

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Change history

  1. 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.

Evidence against regulations

All regulations for Automattic

How much of each regulation’s vendor requirements Automattic’s public evidence reaches.

Reviewing a vendor on public evidence

All articles