Fortinet

As of 17 Sep 2026, Fortinet states on its trust centre that it holds SOC 2, though no separate report detail is provided in this evidence. As of 17 Sep 2026, Fortinet displays a HIPAA badge on its trust centre as a vendor claim, with BAA availability not yet captured, so this should be confirmed directly with the vendor. As of 17 Sep 2026, Fortinet states on its trust centre that it holds GDPR, ISO/IEC 27001, ISO/IEC 27017:2015, ISO/IEC 27018:2019, TISAX, BSI C5, ENS, and ISMAP alignment, all as unverified vendor statements. As of 15 Dec 2022, Fortinet is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ), a status that has not been refreshed in subsequent rows as of 17 Sep 2026. As of 17 Sep 2026, Fortinet is listed in the EU-US Data Privacy Framework registry as active for EU-US, Swiss-US, and UK Extension certifications, with an issue date of 12 Sep 2024 and an expiry date of 22 Oct 2026 that reviewers should monitor as it approaches.

• SOC 2: Fortinet states on its trust centre that it holds SOC 2 (vendor statement, as of 17 Sep 2026); no independent report evidence supplied.
• HIPAA: Fortinet displays a HIPAA badge on its trust centre as of 17 Sep 2026, but BAA availability is not yet captured — confirm directly with vendor.
• EU-US Data Privacy Framework: listed in DPF registry as active (EU-US, SW-US, UK Extension), issued 12 Sep 2024, expiring 22 Oct 2026, as of 17 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.