Skip to main content
CDW logo

CDW

Security and trust center evidence

The information technology products, expertise and service you need to make your business successful.Fast shipping, fast answers, the

cdw.comLogistics and supply chainLast verified 2 Nov 2026
Request the report Are you CDW?

Summary

HIPAA mark, CertReports state Vendor-stated as of 2 Nov 2026HIPAAVendor-statedSOC 2 mark, CertReports state Vendor-stated as of 2 Nov 2026SOC 2Vendor-statedPCI DSS mark, CertReports state Vendor-stated as of 2 Nov 2026PCI DSSVendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 2 Nov 2026ISO 27001Vendor-statedCyber Essentials mark, CertReports state Vendor-stated as of 2 Nov 2026Cyber EssentialsVendor-statedEU-US Data Privacy Framework mark, CertReports state Verified as of 2 Nov 2026DPFVerifiedCCPA / CPRA mark, CertReports state Vendor-stated as of 2 Nov 2026CCPAVendor-statedCyber Essentials Plus mark, CertReports state Vendor-stated as of 2 Nov 2026CE PlusVendor-stated

CDW has 1 registry-verified row and 7 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

CDW states on its trust centre that it holds a SOC 2 Type 2 report (SOC 2, as of 29 Sep 2026). CDW displays a HIPAA badge on its trust centre (HIPAA, as of 29 Sep 2026). CDW also states on its trust centre that it holds PCI DSS, ISO/IEC 27001, Cyber Essentials, Cyber Essentials Plus and CCPA / CPRA coverage (PCI DSS, ISO/IEC 27001, Cyber Essentials, Cyber Essentials Plus, CCPA / CPRA, as of 29 Sep 2026). CDW is listed as active in the EU-US Data Privacy Framework registry under EU-US and UK Extension certifications, issued 25 Oct 2017 and expiring 17 Jul 2027 (EU-US Data Privacy Framework, as of 17 Sep 2026). No public evidence was found for FedRAMP, GDPR or other registry-verified frameworks.

  • SOC 2 Type 2 stated on trust centre; no independently verified report evidenced (SOC 2, as of 29 Sep 2026).
  • EU-US Data Privacy Framework: active EU-US, UK Extension certifications, expires 17 Jul 2027 (as of 17 Sep 2026).
  • HIPAA badge displayed on trust centre; BAA availability not evidenced (HIPAA, as of 29 Sep 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 29 Sep 2026; it is regenerated whenever a row changes.

Among logistics and supply chain vendors

1verified rows

Category median 0, across 69 indexed logistics and supply chain vendors. CDW has more verified rows than 59 percent of them.

hardware resellerit procurementit solutionsvendor management

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for GDPR, FedRAMP, CSA STAR, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence
annual

Displayed as a security profile from public statements, not as attestations, as of 2 Nov 2026.

Change history

  1. 22 Sep 2026SOC 2 evidence no longer foundThe row was not present in the latest ingest.
  2. 22 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  3. 22 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
  4. 22 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
  5. 22 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  6. 18 Sep 2026Cyber Essentials Plus evidence addedA Cyber Essentials Plus row entered the index with state Vendor-stated.
  7. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  8. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  9. 18 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Logistics and supply chain category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

3 Tree Tech logo

3 Tree Tech

Business services

3 Tree Tech acts as a crucial, trusted intermediary, streamlining the complex process of technology adoption for their clients while

DPF mark, CertReports state Expired
2 Nov 2026
easyship logo

easyship

Logistics and supply chain

Stop Overpaying for Shipping — Instantly save with the best domestic and international Shipping Software for

DPF mark, CertReports state Verified
1 verified2 Nov 2026
Inflectra logo

Inflectra

Logistics and supply chain

Inflectra helps enterprises in regulated industries scale critical software delivery with speed, quality, and low

DPF mark, CertReports state Verified
1 verified2 Nov 2026
Veson Nautical logo

Veson Nautical

Logistics and supply chain

Veson delivers software and data solutions for maritime shipping stakeholders to optimize commercial workflows and make informed

DPF mark, CertReports state Expired
2 Nov 2026

Evidence against regulations

All regulations for CDW

How much of each regulation’s vendor requirements CDW’s public evidence reaches.

Reviewing a vendor on public evidence

All articles