Summary
iBoss has 2 registry-verified rows and 1 third-party reported row, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
iBoss is listed in the FedRAMP registry as FedRAMP Authorized, issued 25 Jul 2022 with A-LIGN Compliance and Security, Inc. as auditor, as of 19 Sep 2026. iBoss is listed in the CSA STAR registry with a STAR Level 2 certification and Trusted Cloud Provider status, issued 6 May 2021, as of 17 Sep 2026. That same CSA STAR listing indicates an underlying ISO/IEC 27001 certification, issued 6 May 2021, as of 17 Sep 2026. iBoss's EU-US Data Privacy Framework listing is expired (inactive), originally issued 10 Feb 2020, as of 17 Sep 2026. No public evidence found for SOC 2 or HIPAA in the rows reviewed, as of 19 Sep 2026.
- FedRAMP Authorized, listed in the FedRAMP registry, issued 25 Jul 2022, auditor A-LIGN Compliance and Security, Inc., as of 19 Sep 2026
- CSA STAR Level 2 / Trusted Cloud Provider listed, issued 6 May 2021, as of 17 Sep 2026, with an underlying ISO/IEC 27001 certification referenced in the same listing
- EU-US Data Privacy Framework listing expired, issued 10 Feb 2020, as of 17 Sep 2026; no public evidence found for SOC 2 or HIPAA as of 19 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among security vendors
2verified rows
Category median 1, across 172 indexed security vendors. iBoss has more verified rows than 76 percent of them.
cloud-securitynetwork-securitysaas-protectionzero-trust
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 2 Nov 202647 sources · A-LIGN Compliance and Security, Inc. dba A-LIGN
ISO/IEC 27001ReportedCSA STAR Level 2 certification on the registry, which is built on an ISO/IEC 27001 certification
as of 26 Oct 20266 sources
CSA STARVerifiedSTAR Level 2 certification, Trusted Cloud Provider
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkExpiredInactive
as of 2 Nov 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports4 evidence rows across 4 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Security category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Palo Alto Networks
Research and data providers
Implement Zero Trust, Secure your Network, Cloud workloads, Hybrid Workforce, Leverage Threat Intelligence & Security
Trend Micro
Security
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital
Claroty
Security
Claroty is a global cybersecurity company specializing in the protection of cyber-physical systems (CPS) and the Extended Internet of
ThreatLocker
Security
A Zero Trust cybersecurity solutions platform, ThreatLocker delivers world-class enterprise security software and solutions
Evidence against regulations
All regulations for iBossHow much of each regulation’s vendor requirements iBoss’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read