CrowdStrike
Security and trust center evidence
CrowdStrike Falcon is the only solution to unify next-gen AV, endpoint protection and response, managed hunting, IT hygiene and threat
Summary
SOC 2Vendor-stated
GDPRVendor-stated
FedRAMPVerified
PCI DSSVendor-stated
ISO 27001Vendor-stated
CSA STARVerified
Cyber EssentialsVendor-stated
ISO 42001Vendor-stated
ISO 27017Vendor-statedISO 22301Vendor-stated
DPFVerified
GovRAMPVendor-stated
TISAXVendor-stated
C5Vendor-stated
ENSVendor-statedCrowdStrike has 3 registry-verified rows and 12 vendor-stated rows in the CertReports index, last verified 3 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
SOC 2: CrowdStrike states on its trust centre that it holds a SOC 2 report, as of 19 Oct 2026. FedRAMP: CrowdStrike is listed in the FedRAMP Marketplace as FedRAMP In Process, as of 18 Oct 2026. CSA STAR: CrowdStrike is listed in the CSA STAR registry as holding a Level 2 certification, issued 28 Feb 2017, as of 19 Oct 2026. EU-US Data Privacy Framework: CrowdStrike is listed in the EU-US Data Privacy Framework list as holding active EU-US, SW-US, and UK Extension certifications, valid through 9 Oct 2027, as of 19 Oct 2026. ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27017, ISO 22301, Cyber Essentials, GovRAMP, TISAX, BSI C5, ENS, GDPR, and PCI DSS: CrowdStrike states on its trust centre that it holds each of these, as of 19 Oct 2026.
- SOC 2: vendor states it holds a SOC 2 report on its trust centre (as of 19 Oct 2026).
- FedRAMP: listed in the FedRAMP Marketplace as FedRAMP In Process (as of 18 Oct 2026).
- CSA STAR: listed as a Level 2 certification holder, issued 28 Feb 2017 (as of 19 Oct 2026).
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Oct 2026; it is regenerated whenever a row changes.
Among security vendors
3verified rows
Category median 1, across 172 indexed security vendors. CrowdStrike has more verified rows than 92 percent of them.
endpoint-protectionincident-responsemanaged-detection-responsethreat-detection
Compare with similar vendors
Pick your own comparisonCompliance grid
- SOC 2Vendor-stated
Vendor states SOC 2 on its trust centre
as of 3 Nov 202623 sources - GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 3 Nov 202623 sources - FedRAMPVerified
FedRAMP In Process
as of 2 Nov 202647 sources · Schellman Compliance, LLC - PCI DSSVendor-stated
Vendor states PCI DSS on its trust centre
as of 3 Nov 202623 sources - ISO/IEC 27001Vendor-stated
Vendor states ISO/IEC 27001 on its trust centre
as of 3 Nov 202623 sources - CSA STARVerified
STAR Level 2 certification
as of 26 Oct 20266 sources - Cyber EssentialsVendor-stated
Vendor states Cyber Essentials on its trust centre
as of 3 Nov 202623 sources - ISO/IEC 42001Vendor-stated
Vendor states ISO/IEC 42001:2023 on its trust centre
as of 3 Nov 202623 sources - ISO/IEC 27017Vendor-stated
Vendor states ISO/IEC 27017:2015 on its trust centre
as of 3 Nov 202623 sources - ISO 22301Vendor-stated
Vendor states ISO 22301:2019 on its trust centre
as of 3 Nov 202623 sources - EU-US Data Privacy FrameworkVerified
Active: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 20263 sources - GovRAMPVendor-stated
Vendor states GovRAMP on its trust centre
as of 3 Nov 202623 sources - TISAXVendor-stated
Vendor states TISAX on its trust centre
as of 3 Nov 202623 sources - BSI C5Vendor-stated
Vendor states C5 on its trust centre
as of 3 Nov 202623 sources - ENSVendor-stated
Vendor states ENS on its trust centre
as of 3 Nov 202623 sources
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 3 Nov 2026.
Change history
- 19 Oct 2026EU-US Data Privacy Framework state changedState moved from Expired to Verified.
- 12 Oct 2026EU-US Data Privacy Framework state changedState moved from Verified to Expired.
- 24 Sep 2026FedRAMP evidence addedA FedRAMP row entered the index with state Verified.
- 24 Sep 2026FedRAMP evidence no longer foundThe row was not present in the latest ingest.
- 23 Sep 2026FedRAMP evidence addedA FedRAMP row entered the index with state Verified.
- 23 Sep 2026FedRAMP evidence no longer foundThe row was not present in the latest ingest.
- 22 Sep 2026FedRAMP evidence addedA FedRAMP row entered the index with state Verified.
- 22 Sep 2026FedRAMP evidence no longer foundThe row was not present in the latest ingest.
- 17 Sep 2026BSI C5 evidence addedA BSI C5 row entered the index with state Vendor-stated.
- 17 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Security category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
SentinelOne
Security
SentinelOne is redefining cybersecurity by pushing the boundaries of autonomous
Trellix
Media and content
Trellix was a software company whose products allowed web users to set up personal websites with the use of online publishing tools
Trend Micro
Security
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital
Cylance
Security
Arctic Wolf®, the leader in security operations, has acquired Cylance, a pioneer of AI-based endpoint
Evidence against regulations
All regulations for CrowdStrikeHow much of each regulation’s vendor requirements CrowdStrike’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read