AvePoint
Security and trust center evidence
AvePoint is a public company headquartered in Jersey City, New Jersey, United States
Summary
AvePoint has 3 registry-verified rows and 1 third-party reported row in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: Agency In Process. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 19 Sep 2026, AvePoint is listed in the FedRAMP registry with a status of Agency In Process, with the assessment conducted by Lunarline, Inc.; no authorization issue date is listed. As of 17 Sep 2026, AvePoint is listed in the CSA STAR registry with a Level 2 certification, entered on 29 Mar 2017. As of 17 Sep 2026, that CSA STAR Level 2 registry entry is described as built on an ISO/IEC 27001 certification dated 29 Mar 2017. As of 17 Sep 2026, AvePoint is listed in the EU-US Data Privacy Framework registry as active across the EU-US Certification, the SW-US Certification and the UK Extension Certification, originally issued 22 Dec 2016 and running through 14 Apr 2027. No public evidence found for SOC 2 as of 17 Sep 2026.
- FedRAMP - listed in the FedRAMP registry as Agency In Process, assessed by Lunarline (as of 19 Sep 2026)
- ISO/IEC 27001 / CSA STAR - listed in the CSA STAR registry with a Level 2 certification described as built on an ISO/IEC 27001 certification, dated 29 Mar 2017 (as of 17 Sep 2026)
- EU-US Data Privacy Framework - listed as active (EU-US, SW-US, UK Extension), issued 22 Dec 2016, through 14 Apr 2027 (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among cloud storage vendors
3verified rows
Category median 1, across 51 indexed cloud storage vendors. AvePoint has more verified rows than 94 percent of them.
collaboration securitydata managementsaas backupsaas governance
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedAgency In Process
as of 1 Nov 202646 sources · Lunarline, Inc.
ISO/IEC 27001ReportedCSA STAR Level 2 certification on the registry, which is built on an ISO/IEC 27001 certification
as of 26 Oct 20266 sources
CSA STARVerifiedSTAR Level 2 certification
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026FedRAMP evidence addedA FedRAMP row entered the index with state Verified.
- 18 Sep 2026FedRAMP evidence no longer foundThe row was not present in the latest ingest.
Similar vendors with evidence
Related by product tags and the Cloud storage category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Druva
Cloud storage
The Druva Data Resiliency Cloud is the only at-scale SaaS platform designed for your multi-cloud
Spanning Cloud Apps
Cloud storage
Spanning delivers SaaS backup for Google Workspace, Microsoft 365 &
Qumulo
Cloud storage
Store, manage, and simplify all your unstructured data and hybrid workflows in one platform, anywhere - at the edge, in the core, or in any
eShare
Cloud storage
eSHARE offers an advanced solution that revolutionizes the way organizations share sensitive data with external
Evidence against regulations
All regulations for AvePointHow much of each regulation’s vendor requirements AvePoint’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read