Fly.io

Fly.io states on its trust centre that it holds a SOC 2 Type II report, as of 21 Oct 2026. No independent registry evidence for Fly.io's SOC 2 status was supplied, as of 21 Oct 2026. Fly.io is listed in the EU-US Data Privacy Framework registry as active for the EU-US, SW-US and UK Extension Certifications, issued 9 Aug 2024, as of 19 Oct 2026. The EU-US Data Privacy Framework listing for Fly.io expires 15 Jun 2027, as of 19 Oct 2026. No public evidence found for FedRAMP or PCI DSS for Fly.io, as of 21 Oct 2026.

• States a SOC 2 Type II report on its trust centre (self-reported), as of 21 Oct 2026
• EU-US Data Privacy Framework active, expires 15 Jun 2027, as of 19 Oct 2026
• No public evidence found for FedRAMP or PCI DSS, as of 21 Oct 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 21 Oct 2026; it is regenerated whenever a row changes.