Bugsnag
Security and trust center evidence
Bugsnag is the leading crash and error monitoring platform for software teams to improve their code quality and customer
Summary
Bugsnag has 1 registry-verified row, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is CSA STAR: STAR Level 1 self-assessment (CAIQ). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 17 Sep 2026, Bugsnag is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) issued 5 Mar 2018. As of 17 Sep 2026, the EU-US Data Privacy Framework registry lists Bugsnag's certification, originally issued 24 Jan 2018, as expired, with the entry status recorded as Inactive. No expiration date is listed in the EU-US Data Privacy Framework registry entry as of 17 Sep 2026. No public evidence found for a SOC 2 report or an ISO/IEC 27001 certificate for Bugsnag as of 17 Sep 2026. No public evidence found for a FedRAMP authorization for Bugsnag as of 17 Sep 2026.
- Listed in the CSA STAR registry: Level 1 self-assessment (CAIQ), issued 5 Mar 2018, as of 17 Sep 2026
- EU-US Data Privacy Framework: expired, status Inactive, originally issued 24 Jan 2018, no expiration date on record, as of 17 Sep 2026
- No public evidence found for SOC 2, ISO/IEC 27001 or FedRAMP as of 17 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 23 Sep 2026; it is regenerated whenever a row changes.
Among devops and observability vendors
1verified rows
Category median 1, across 193 indexed devops and observability vendors. Bugsnag has more verified rows than 44 percent of them.
application performancecrash reportingerror monitoringincident detection
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the DevOps and observability category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
ThousandEyes
Logistics and supply chain
ThousandEyes monitors internal and external network performance to improve application delivery and reduce service
Backtrace
Developer tools
Backtrace is the crash and error reporting solution for the video game, embedded technologies, desktop/mobile software, and SaaS
Rollbar
DevOps and observability
Rollbar is a SaaS application that helps remediate issues in
Monte Carlo Data
DevOps and observability
Data breaks. We ensure your team is the first to know and the first to solve with end-to-end data observability.
Evidence against regulations
All regulations for BugsnagHow much of each regulation’s vendor requirements Bugsnag’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read