Skip to main content
Forcepoint logo

Forcepoint

Security and trust center evidence

Forcepoint is a global data security leader headquartered in Austin, Texas, delivering AI-native protection for sensitive data across

forcepoint.comSecurityLast verified 3 Nov 2026
Request the report Are you Forcepoint?

Summary

SOC 2 mark, CertReports state Vendor-stated as of 3 Nov 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 3 Nov 2026GDPRVendor-statedFedRAMP mark, CertReports state Verified as of 2 Nov 2026FedRAMPVerifiedISO/IEC 27001 mark, CertReports state Vendor-stated as of 3 Nov 2026ISO 27001Vendor-statedCSA STAR mark, CertReports state Verified as of 26 Oct 2026CSA STARVerifiedISO/IEC 27017 mark, CertReports state Vendor-stated as of 3 Nov 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 3 Nov 2026ISO 27018Vendor-statedEU-US Data Privacy Framework mark, CertReports state Expired as of 2 Nov 2026DPFExpiredCCPA / CPRA mark, CertReports state Vendor-stated as of 3 Nov 2026CCPAVendor-stated

Forcepoint has 2 registry-verified rows and 6 vendor-stated rows, and 1 expired in the CertReports index, last verified 3 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 Type 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Forcepoint states on its trust centre that it holds SOC 2 Type 2, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, GDPR, and CCPA attestations, as of 18 Sep 2026. Forcepoint is listed in the FedRAMP registry as FedRAMP Authorized, issued 23 Nov 2020 and assessed by Coalfire Systems, Inc., as of 19 Sep 2026. Forcepoint is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) issued 25 Jun 2015, as of 17 Sep 2026. Forcepoint's EU-US Data Privacy Framework registry listing is marked inactive as of 17 Sep 2026, with the entry originally issued 6 Dec 2016. The SOC 2, ISO 27001, ISO 27017, ISO 27018, GDPR, and CCPA statements for Forcepoint are vendor-reported on its trust centre rather than registry-verified, as of 18 Sep 2026.

  • FedRAMP: Authorized, issued 23 Nov 2020, assessed by Coalfire Systems, Inc. (as of 19 Sep 2026).
  • CSA STAR: Level 1 self-assessment (CAIQ) issued 25 Jun 2015 (as of 17 Sep 2026); EU-US Data Privacy Framework: inactive, originally issued 6 Dec 2016 (as of 17 Sep 2026).
  • SOC 2 Type 2, ISO/IEC 27001:2022, 27017:2015, 27018:2019, GDPR, CCPA: vendor states these on its trust centre (as of 18 Sep 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among security vendors

2verified rows

Category median 1, across 172 indexed security vendors. Forcepoint has more verified rows than 76 percent of them.

cloud securitydata securitydlpnetwork securitythreat detection

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, PCI DSS, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence
report available

Displayed as a security profile from public statements, not as attestations, as of 3 Nov 2026.

Change history

  1. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  4. 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
  5. 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
  6. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Security category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Red Canary logo

Red Canary

Security

Red Canary, a leader in managed detection and response (MDR), provides comprehensive protection across cloud workloads, identities, SaaS

CSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Expired
1 verified2 Nov 2026
Vectra AI logo

Vectra AI

Security

Vectra AI is the leader in hybrid attack detection, investigation and

CSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
2 verified2 Nov 2026
Lacework logo

Lacework

Security

Lacework is the data-driven cloud security company delivering end-to-end visibility and automated insight into risk across multicloud

CSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Expired
1 verified2 Nov 2026
Wiz logo

Wiz

Security

Wiz is on a mission to transform cloud security for customers – which include 40% of the Fortune 100 – by empowering them to embrace a new

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
2 verified · 12 stated3 Nov 2026

Evidence against regulations

All regulations for Forcepoint

How much of each regulation’s vendor requirements Forcepoint’s public evidence reaches.

Reviewing a vendor on public evidence

All articles