Miro

Security and trust center evidence

Speed up product development from ideation to

miro.com CollaborationLast verified 1 Nov 2026

Request the report Are you Miro?

SOC 2Vendor-stated

GDPRVendor-stated

ISO 27001Vendor-stated

Cyber EssentialsVendor-stated

ISO 42001Vendor-stated

Miro has 1 registry-verified row and 8 vendor-stated rows in the CertReports index, last verified 1 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Miro states SOC 2 Type II, GDPR, ISO/IEC 27001, Cyber Essentials and ISO/IEC 42001 on its trust centre, as of 29 Sep 2026. Miro states CCPA / CPRA, TISAX AL2 and IRAP on its trust centre, as of 29 Sep 2026. Miro is listed in the EU-US Data Privacy Framework registry as active across the SW-US, EU-US and UK Extension certifications, issued 25 Mar 2020 and expiring 27 Jul 2027, as of 17 Sep 2026. No public evidence found for FedRAMP, PCI DSS or HIPAA as of 29 Sep 2026. No public evidence found for CSA STAR as of 29 Sep 2026.

Vendor states SOC 2 Type II, ISO/IEC 27001 and ISO/IEC 42001 on its trust centre (as of 29 Sep 2026)
EU-US Data Privacy Framework: listed as active, expires 27 Jul 2027 (as of 17 Sep 2026)
Vendor states TISAX AL2, IRAP and Cyber Essentials on its trust centre (as of 29 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 29 Sep 2026; it is regenerated whenever a row changes.

Among collaboration vendors

1verified rows

Category median 1, across 95 indexed collaboration vendors. Miro has more verified rows than 42 percent of them.

product-developmentteam-alignmentvisual-collaborationwhiteboarding

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, PCI DSS, CSA STAR, ISO 27701. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 12 subprocessors listed on the trust centre · as of 1 Nov 2026

Open

Subprocessors (12)

AmazonInfrastructure · United States* (data residency available for AUS, EU, US, Japan)
AnthropicAI Functionality · United States
BrazeService Related Emails · United States
ElevenLabsLive Captions, Transcripts · United States
GA
GainsightCustomer Success/Support · United States
GoogleSensitive Data Discovery (Enterprise Guard) · United States
IntercomCustomer Support (Chatbot) · United States
MicrosoftAccessibility | OCR functionality | AI · United States
OpenAIAI Functionality · United States
PA
PartnerHeroCustomer Support · United States
SK
SkilljarCustomer Training (Miro Academy) · United States
ZendeskCustomer Support Tickets · United States

Security profile

Displayed as a security profile from public statements, not as attestations, as of 1 Nov 2026.

Change history

20 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
20 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.
20 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
20 Sep 2026IRAP evidence addedA IRAP row entered the index with state Vendor-stated.
20 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
20 Sep 2026ISO/IEC 42001 evidence addedA ISO/IEC 42001 row entered the index with state Vendor-stated.
20 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
20 Sep 2026TISAX evidence addedA TISAX row entered the index with state Vendor-stated.
20 Sep 2026Subprocessor added: AmazonAmazon appeared on the subprocessor list.
20 Sep 2026Subprocessor added: AnthropicAnthropic appeared on the subprocessor list.