CoLab

Security and trust center evidence

Human and AI design review for hardware

colabsoftware.com CollaborationLast verified 1 Nov 2026

Request the report Are you CoLab?

SOC 2Vendor-stated

FedRAMPVerified

ISO 27001Vendor-stated

ISO 27017Vendor-stated

ISO 27018Vendor-stated

CoLab has 1 registry-verified row and 4 vendor-stated rows in the CertReports index, last verified 1 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

CoLab states on its trust centre that it has a SOC 2 Type II report, as of 25 Sep 2026. CoLab is listed in the FedRAMP registry as FedRAMP Authorized, with authorization dated 3 Jun 2026 and assessed by Schellman Compliance, LLC, as of 25 Sep 2026. CoLab states on its trust centre that it holds ISO/IEC 27001:2022, as of 25 Sep 2026. CoLab states on its trust centre that it holds ISO/IEC 27017:2015, as of 25 Sep 2026. CoLab states on its trust centre that it holds ISO/IEC 27018:2025, as of 25 Sep 2026.

SOC 2 Type II: vendor-stated (Vanta), as of 25 Sep 2026 - no registry verification found.
FedRAMP: Authorized, registry-verified, authorized 3 Jun 2026, assessor Schellman Compliance, LLC, as of 25 Sep 2026.
ISO/IEC 27001:2022, 27017:2015 and 27018:2025: vendor-stated on trust centre (Vanta), as of 25 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 25 Sep 2026; it is regenerated whenever a row changes.

Among collaboration vendors

1verified rows

Category median 1, across 95 indexed collaboration vendors. CoLab has more verified rows than 42 percent of them.

cad collaborationdesign reviewhardware design

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, GDPR, PCI DSS, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 18 subprocessors listed on the trust centre · as of 30 Sep 2026

Open

Subprocessors (18)

Amazon Web ServicesLarge Language Model (LLM) and Hosting Provider · Canada and US
AN
AnthropicLarge Language Model (LLM) Provider · Global
AU
Auth0Identity Management Platform · US
CloudflareGlobal Network Service Provider · US
DatadogMonitoring and Analytics Platform · US
GC
Google CloudLarge Language Model (LLM) Provider · Global
HubSpotCustomer Relationship Management · US
IN
IntercomCustomer Service Platform · US
LaunchDarklyFeature Flag Management · US
Microsoft AzureLarge Language Model (LLM) Provider · Canada and US
MI
MixpanelProduct Analytics · US
OpenAILarge Language Model (LLM) Provider · Global
PA
ParagonIntegration Platform As A Service · US
PE
PendoProduct Experience Platform · US
RE
RetoolSoftware Development Platform · US
SalesforceCustomer Relationship Management · US
TU
TurboPufferServerless Vector and Full Text Search Database · Canada
WO
WorkOSEngineering · US

Security profile

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

18 Sep 2026Subprocessor added: MixpanelMixpanel appeared on the subprocessor list.
18 Sep 2026Subprocessor added: OpenAIOpenAI appeared on the subprocessor list.
18 Sep 2026Subprocessor added: ParagonParagon appeared on the subprocessor list.
18 Sep 2026Subprocessor added: PendoPendo appeared on the subprocessor list.
18 Sep 2026Subprocessor added: RetoolRetool appeared on the subprocessor list.
18 Sep 2026Subprocessor added: SalesforceSalesforce appeared on the subprocessor list.
18 Sep 2026Subprocessor added: TurboPufferTurboPuffer appeared on the subprocessor list.
18 Sep 2026Subprocessor added: WorkOSWorkOS appeared on the subprocessor list.
18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.