FOSSA

Compliance evidence

FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and

fossa.com ProcurementLast verified 2 Nov 2026

Vendor website Are you FOSSA?

Compliance grid

EU-US Data Privacy FrameworkVerified
Active: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026
1 source

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.