New Relic

Security and trust center evidence

New Relic is a software analytics company that makes sense of billions of metrics about millions of applications in real

newrelic.com DevOps and observabilityLast verified 1 Nov 2026

Request the report Are you New Relic?

FedRAMPVerified

CSA STARVerified

DPFVerified

New Relic has 3 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

New Relic is listed in the FedRAMP registry, as of 19 Sep 2026, as FedRAMP Authorized, with the authorization dated 2 Mar 2020 and the assessment performed by Schellman Compliance, LLC. New Relic is also listed in the CSA STAR registry, as of 17 Sep 2026, with a STAR Level 1 self-assessment (CAIQ) dated 16 Jun 2020. The company is listed in the EU-US Data Privacy Framework registry, as of 17 Sep 2026, with an active EU-US Certification, SW-US Certification and UK Extension Certification, issued 8 Nov 2016 and set to expire 12 Aug 2027. No public evidence found for SOC 2 or ISO/IEC 27001. No public evidence found for HIPAA.

Listed in FedRAMP registry as FedRAMP Authorized as of 19 Sep 2026 - authorization dated 2 Mar 2020, assessed by Schellman Compliance, LLC.
Listed in CSA STAR registry as of 17 Sep 2026 - STAR Level 1 self-assessment (CAIQ) dated 16 Jun 2020.
Listed in EU-US Data Privacy Framework registry as of 17 Sep 2026 - active certification issued 8 Nov 2016, expires 12 Aug 2027.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among devops and observability vendors

3verified rows

Category median 1, across 193 indexed devops and observability vendors. New Relic has more verified rows than 96 percent of them.

apminfrastructuremonitoringobservability

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, PCI DSS, ISO 27001, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.

Subprocessors

No subprocessor list captured yet.

Change history

18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.

Similar vendors with evidence

Related by product tags and the DevOps and observability category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.