Infisical
Security and trust center evidence
Security infrastructure for developers and agents
Summary
Infisical has 2 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, CertReports holds 2 vendor-stated rows for Infisical, drawn from its trust centre (Vanta). Infisical states on its trust centre that it holds that it will sign a business associate agreement and a SOC 2 Type II report, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, GDPR, PCI DSS and FedRAMP as of 21 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured), vendor-stated as of 21 Sep 2026
- SOC 2: Vendor states SOC 2 on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among developer tools vendors
0verified rows
Category median 0, across 220 indexed developer tools vendors. Infisical has no registry-verified row yet, like 64 percent of them; its evidence is vendor-stated or reported.
certificate managementidentity securityprivileged access managementsecrets management
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Developer tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Palo Alto Networks
Identity and access
Protect your organization with
Delinea
Identity and access
Try Delinea's AI-driven identity security, authorization and PAM solutions to secure privileged access across your organization in real
Merge API
Developer tools
Merge is the infrastructure layer for production
Velt
Developer tools
SDK for adding an agent and human governance layer to your product
Evidence against regulations
All regulations for InfisicalHow much of each regulation’s vendor requirements Infisical’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read