Axon
Security and trust center evidence
Axon Enterprise, formerly known as TASER International, creates connected technologies for truth in public
Summary
Axon has 3 registry-verified rows and 15 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 18 Oct 2026, Axon is listed in the FedRAMP registry as FedRAMP Authorized, dated 22 Nov 2022 and audited by Fortreum, LLC. As of 19 Oct 2026, Axon is listed in the CSA STAR registry with a Level 2 attestation and Trusted Cloud Provider status dated 29 Sep 2015. As of 19 Oct 2026, Axon is listed in the EU-US Data Privacy Framework registry as active across the EU-US, UK Extension, and Swiss-US certifications, valid through 01 Oct 2027. As of 19 Oct 2026, Axon states on its trust centre that it holds SOC 2, GDPR, ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 42001:2023, ISO/IEC 27017:2015, ISO/IEC 27018:2019, ISO 22301:2019, Cyber Essentials, Cyber Essentials Plus, TX-RAMP, BSI C5, ENS, and IRAP. As of 19 Oct 2026, Axon displays a HIPAA badge on its trust centre as a claim, with BAA availability not yet captured.
- FedRAMP: Authorized (as of 18 Oct 2026, issued 22 Nov 2022, auditor Fortreum, LLC)
- EU-US Data Privacy Framework: active, listed through 01 Oct 2027 (as of 19 Oct 2026)
- HIPAA: vendor displays badge as claim on trust centre; BAA availability not captured (as of 19 Oct 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Oct 2026; it is regenerated whenever a row changes.
Among government and public sector vendors
3verified rows
Category median 1, across 57 indexed government and public sector vendors. Axon has more verified rows than 96 percent of them.
body-worn camerasevidence managementlaw enforcement softwarepublic safety technologytaser devices
Compare with similar vendors
Pick your own comparisonCompliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 2 Nov 202622 sources
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 2 Nov 202622 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 2 Nov 202622 sources - FedRAMPVerified
FedRAMP Authorized
as of 1 Nov 202646 sources · Fortreum, LLC
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001:2022 on its trust centre
as of 2 Nov 202622 sources- CSA STARVerified
STAR Level 2 attestation, Trusted Cloud Provider
as of 26 Oct 20266 sources
Cyber EssentialsVendor-statedVendor states Cyber Essentials on its trust centre
as of 2 Nov 202622 sources
ISO/IEC 27701Vendor-statedVendor states ISO/IEC 27701:2019 on its trust centre
as of 2 Nov 202622 sources
ISO/IEC 42001Vendor-statedVendor states ISO/IEC 42001:2023 on its trust centre
as of 2 Nov 202622 sources
ISO/IEC 27017Vendor-statedVendor states ISO/IEC 27017:2015 on its trust centre
as of 2 Nov 202622 sources
ISO/IEC 27018Vendor-statedVendor states ISO/IEC 27018:2019 on its trust centre
as of 2 Nov 202622 sources
ISO 22301Vendor-statedVendor states ISO 22301:2019 on its trust centre
as of 2 Nov 202622 sources
EU-US Data Privacy FrameworkVerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 2 Nov 20263 sources
TX-RAMPVendor-statedVendor states TX-RAMP on its trust centre
as of 2 Nov 202622 sources
Cyber Essentials PlusVendor-statedVendor states Cyber Essentials Plus on its trust centre
as of 2 Nov 202622 sources
BSI C5Vendor-statedVendor states C5 on its trust centre
as of 2 Nov 202622 sources
ENSVendor-statedVendor states ENS on its trust centre
as of 2 Nov 202622 sources
IRAPVendor-statedVendor states IRAP on its trust centre
as of 2 Nov 202622 sources
No public evidence yet for PCI DSS. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 2 Nov 2026.
Change history
- 19 Oct 2026EU-US Data Privacy Framework state changedState moved from Expired to Verified.
- 17 Sep 2026BSI C5 evidence addedA BSI C5 row entered the index with state Vendor-stated.
- 17 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.
- 17 Sep 2026Cyber Essentials Plus evidence addedA Cyber Essentials Plus row entered the index with state Vendor-stated.
- 17 Sep 2026ENS evidence addedA ENS row entered the index with state Vendor-stated.
- 17 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 17 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
- 17 Sep 2026IRAP evidence addedA IRAP row entered the index with state Vendor-stated.
- 17 Sep 2026ISO 22301 evidence addedA ISO 22301 row entered the index with state Vendor-stated.
- 17 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
Evidence against regulations
All regulations for AxonHow much of each regulation’s vendor requirements Axon’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read