Summary
OPSWAT has 7 vendor-stated rows, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 27 Sep 2026, OPSWAT states on its trust centre that it holds SOC 2. As of 27 Sep 2026, OPSWAT states on its trust centre that it holds ISO/IEC 27001:2022 and SOC 3. As of 27 Sep 2026, OPSWAT states on its trust centre that it addresses GDPR and CCPA / CPRA. As of 27 Sep 2026, OPSWAT states on its trust centre that it holds Cyber Essentials and Cyber Essentials Plus. As of 17 Sep 2026, an EU-US Data Privacy Framework entry dated 25 May 2018 is listed as inactive for OPSWAT.
- States SOC 2, SOC 3, and ISO/IEC 27001:2022 on its trust centre (as of 27 Sep 2026)
- States GDPR, CCPA / CPRA, Cyber Essentials, and Cyber Essentials Plus on its trust centre (as of 27 Sep 2026)
- EU-US Data Privacy Framework entry dated 25 May 2018 listed as inactive (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 27 Sep 2026; it is regenerated whenever a row changes.
Evidence count
0verified rows
endpoint protectionfile securitymalware preventionthreat detection
Compliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 2 Nov 202622 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 2 Nov 202622 sources
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001:2022 on its trust centre
as of 2 Nov 202622 sources
Cyber EssentialsVendor-statedVendor states Cyber Essentials on its trust centre
as of 2 Nov 202622 sources
SOC 3Vendor-statedVendor states SOC 3 on its trust centre
as of 2 Nov 202622 sources
EU-US Data Privacy FrameworkExpiredInactive
as of 2 Nov 20261 source- CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 2 Nov 202622 sources
Cyber Essentials PlusVendor-statedVendor states Cyber Essentials Plus on its trust centre
as of 2 Nov 202622 sources
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.
- 18 Sep 2026Cyber Essentials Plus evidence addedA Cyber Essentials Plus row entered the index with state Vendor-stated.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
Evidence against regulations
All regulations for OPSWATHow much of each regulation’s vendor requirements OPSWAT’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read