Skip to main content
KS

Kurtosys Systems

Security and trust center evidence

kurtosys.comLast verified 18 Sep 2026
Request the report Are you Kurtosys Systems?

Summary

SOC 2 mark, CertReports state Vendor-stated as of 18 Sep 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 18 Sep 2026GDPRVendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 18 Sep 2026ISO 27001Vendor-statedISO 22301 mark, CertReports state Vendor-stated as of 18 Sep 2026ISO 22301Vendor-statedEU-US Data Privacy Framework mark, CertReports state Expired as of 17 Sep 2026DPFExpiredCCPA / CPRA mark, CertReports state Vendor-stated as of 18 Sep 2026CCPAVendor-stated

Kurtosys Systems has 5 vendor-stated rows, and 1 expired in the CertReports index, last verified 18 Sep 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Kurtosys Systems states it holds a SOC 2 Type II report. Kurtosys Systems states it holds a data processing agreement. Kurtosys Systems states it holds an ISO/IEC 27001 certificate. Kurtosys Systems states it holds an ISO 22301 certificate. Kurtosys Systems previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 17 Sep 2026..

  • SOC 2: Vendor states SOC 2 on its trust centre (as of 18 Sep 2026)
  • GDPR: Vendor states GDPR on its trust centre (as of 18 Sep 2026)
  • ISO/IEC 27001: Vendor states ISO/IEC 27001 on its trust centre (as of 18 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised.

Evidence count

0verified rows

Compliance grid

No public evidence yet for HIPAA, FedRAMP, PCI DSS, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (14)

  • AB
    Actions Being Taken by Cloudflare
  • CR
    Case Raised We have raised a case with Cloudflare
  • CR
    Cloudflare Remediation Status Cloudflare
  • CT
    Conclusion The Cloudflare
  • CM
    Continuous monitoring of platform and Cloudflare
  • FS
    Formal support request to Cloudflare
  • IV
    Impact Varied Across the Industry Cloudflare
  • IF
    Internal follow-up will continue until Cloudflare
  • NC
    No customer action was required Cloudflare
  • NP
    Non-Production Our non-production Cloudflare
  • OC
    Oracle Cloud
  • OP
    Our Platform
  • UC
    Unless Cloudflare
  • WC
    Which Cloudflare

Change history

  1. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026ISO 22301 evidence addedA ISO 22301 row entered the index with state Vendor-stated.
  4. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  5. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  6. 18 Sep 2026Subprocessor added: Actions Being Taken by CloudflareActions Being Taken by Cloudflare appeared on the subprocessor list.
  7. 18 Sep 2026Subprocessor added: Case Raised We have raised a case with CloudflareCase Raised We have raised a case with Cloudflare appeared on the subprocessor list.
  8. 18 Sep 2026Subprocessor added: Cloudflare Remediation Status CloudflareCloudflare Remediation Status Cloudflare appeared on the subprocessor list.
  9. 18 Sep 2026Subprocessor added: Conclusion The CloudflareConclusion The Cloudflare appeared on the subprocessor list.
  10. 18 Sep 2026Subprocessor added: Continuous monitoring of platform and CloudflareContinuous monitoring of platform and Cloudflare appeared on the subprocessor list.