Cortex
Security and trust center evidence
Cortex is the Internal Developer Portal eliminating “developer tax”…
Summary
Cortex has 2 vendor-stated rows, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Cortex states on its trust centre that it holds SOC 2, as of 18 Sep 2026. Cortex states on its trust centre that it holds ISO 27001:2022, as of 18 Sep 2026. Under the EU-US Data Privacy Framework, Cortex is listed in the DPF registry with a status of Inactive, marking an expired certification, as of 17 Sep 2026. No public evidence was found for a HIPAA BAA as of 18 Sep 2026. No public evidence was found for CCPA/CPRA as of 18 Sep 2026.
- SOC 2: vendor states it holds SOC 2 on its trust centre, as of 18 Sep 2026
- ISO/IEC 27001: vendor states ISO 27001:2022 on its trust centre, as of 18 Sep 2026
- EU-US Data Privacy Framework: listed in the DPF registry as Inactive (expired), as of 17 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among devops and observability vendors
0verified rows
Category median 1, across 193 indexed devops and observability vendors. Cortex has no registry-verified row yet, like 44 percent of them; its evidence is vendor-stated or reported.
developer productivityengineering operationsgovernanceinternal developer portal
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the DevOps and observability category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Sentry
DevOps and observability
Application performance monitoring for developers & software teams to see errors clearer, solve issues faster & continue learning
Gigamon
DevOps and observability
The Gigamon Deep Observability Pipeline delivers network-derived telemetry to cloud, security, and observability tools for visibility into
Ethyca
DevOps and observability
Ethyca builds trusted data infrastructure to govern sensitive data in real time with automated inventory, consent, and AI
MONEPEAK FINTECH PRIVATE
DevOps and observability
CARD91 builds regulated payment infrastructure for banks and NBFCs—covering issuing, acquiring, risk, governance, and AI-driven decisioning
Evidence against regulations
All regulations for CortexHow much of each regulation’s vendor requirements Cortex’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read