iManage

Security and trust center evidence

iManage was founded in 1995 and initially merged with Interwoven in

imanage.com Legal techLast verified 1 Nov 2026

Request the report Are you iManage?

SOC 2Verified

ISO 27001Vendor-stated

CSA STARVerified

ISO 27701Vendor-stated

SOC 3Verified

ISO 27017Vendor-stated

ISO 27018Vendor-stated

DPFVerified

iManage has 4 registry-verified rows and 4 vendor-stated rows in the CertReports index, last verified 1 Nov 2026. The strongest row is SOC 2: Evidenced by the public SOC 3 report for the same examination period. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

iManage has a SOC 2 Type II report, evidenced by a public SOC 3 report for the period ending 31 Mar 2026 and issued 13 Jul 2026 (SOC 2, as of 29 Sep 2026). The same SOC 3 report is published on the vendor's trust centre (SOC 3, as of 29 Sep 2026). iManage is listed in the CSA STAR registry with a Level 2 certification, issued 2 May 2021 (CSA STAR, as of 17 Sep 2026). iManage is listed as active in the EU-US Data Privacy Framework registry under SW-US, EU-US and UK Extension certifications, issued 4 Oct 2019 and expiring 10 Aug 2027 (EU-US Data Privacy Framework, as of 17 Sep 2026). iManage also states on its trust centre that it holds ISO/IEC 27001:2022, ISO/IEC 27701, ISO/IEC 27017 and ISO/IEC 27018 coverage (ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, as of 29 Sep 2026).

SOC 2 Type II report evidenced via public SOC 3, period ending 31 Mar 2026 (SOC 2 / SOC 3, as of 29 Sep 2026).
CSA STAR Level 2 certification, issued 2 May 2021 (CSA STAR, as of 17 Sep 2026); EU-US Data Privacy Framework active, expires 10 Aug 2027 (as of 17 Sep 2026).
ISO/IEC 27001:2022, 27701, 27017 and 27018 stated on trust centre, no registry verification found (as of 29 Sep 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 29 Sep 2026; it is regenerated whenever a row changes.

Among legal tech vendors

4verified rows

Category median 1, across 44 indexed legal tech vendors. iManage has more verified rows than 95 percent of them.

document managementemail managementknowledge managementlaw firm software

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, GDPR, FedRAMP, PCI DSS, Cyber Essentials, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 17 subprocessors listed on the trust centre · as of 30 Sep 2026

Open

Public trust centre documents

Public · iManage - ISO27001, ISO27701, ISO27017, ISO27018 - Certificate; iManage - ISO 22301 - Certificate; iManage SOC 3 Type 2 Report 2026 · as of 18 Sep 2026

Open

Public · as of 30 Sep 2026

Open

Standard contractual clauses

On request · Listed on the trust centre as "iManage Transfer Impact Assessment" · as of 30 Sep 2026

Open

AI and data use policy

On request · Listed on the trust centre as "iManage Artificial Intelligence in the Workplace Policy" · as of 30 Sep 2026

Open

Subprocessors (17)

Amazon Web Services, Inc.Data Center Provider (Closing Folders – data storage only) · Australia, Canada, European Union, United Kingdom, and United States
BeamerCustomer Notifications and iHelp (Multiple iManage Cloud Services) · United States
CE
CentersquareData Center Provider (Multiple iManage Cloud Services – data storage only) · United States
DR
Digital Realty (UK) LimitedData Center Provider (Multiple iManage Cloud Services – data storage only) · United Kingdom
iManage Canada Technologies ULCCustomer Support and Operational Services (All iManage Cloud Services and Software) · 171 East Liberty Street, Suite 300 Toronto, ON M6K 3P6
iManage EMEA LimitedCustomer Support and Operational Services (All iManage Cloud Services and Software) · Suite 1, 3rd Floor, 11-12 St. James’s Square London, United Kingdom, SW1Y 4LB
iManage LLCCustomer Support and Operational Services(All iManage Cloud Services and Software) · 71 South Wacker Drive, 4th Floor Chicago, IL 60606
MessageBird (Pusher)Communications Integration Platform (Closing Folders) · Netherlands
Microsoft CorporationMicrosoft 365 Apps and Services, (Multiple iManage Cloud Services) · United States
MixPanelVisualization of User Analytics (Multiple iManage Cloud Services and Software) · United States
MongoDB, Inc.Atlas Database (Multiple iManage Cloud Services and Software, including relevant integrations with Tracker, Power Automate, eSignature, MCP Server, and Insight+ Curation) · United States
NetRight Singapore Holdings PTE Ltd.Customer Support and Operational Support(All iManage Cloud Services and Software) · 4 Battery Road, #25-01, Bank of China Building, Singapore 49908
NetRight Spain Holdings S.L.Customer Support and Operational Services (All iManage Cloud Services and Software) · Cl Tuset 23-25 P.1 08006 Barcelona
NetRight Technologies Private LimitedCustomer Support and Operational Services(All iManage Cloud Services and Software) · Infinix Pearl, 17/2, 2nd floor, Industrial Layout, Jakkasandra, 3rd Block Koramangala, Bangalore 560034
NL
NEXTDC LimitedData Center Provider (Multiple iManage Cloud Services – data storage only) · Australia
Twilio (Segment, SendGrid)Cloud Communications, Email Service, User Analytics (Multiple iManage Cloud Services and Software) · Segment: United States and European Union SendGrid: Customer selected region
Zendesk, Inc.Customer Support Tickets (Multiple iManage Cloud Services and Software) · Unites States

Security profile

Pen test cadence: annual

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

25 Sep 2026SOC 2 state changedState moved from Vendor-stated to Verified.
25 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Verified.
18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27701 evidence addedA ISO/IEC 27701 row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27001 evidence no longer foundThe row was not present in the latest ingest.
18 Sep 2026Subprocessor added: Amazon Web Services, Inc.Amazon Web Services, Inc. appeared on the subprocessor list.
18 Sep 2026Subprocessor added: BeamerBeamer appeared on the subprocessor list.