QAD
Security and trust center evidence
QAD Cloud Services is engaged in deploying QAD ERP solutions to the customers in a SaaS
Summary
QAD has 2 registry-verified rows and 1 third-party reported row in the CertReports index, last verified 26 Oct 2026. The strongest row is ISO/IEC 27001: CSA STAR Level 2 certification on the registry, which is built on an ISO/IEC 27001 certification. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 17 Sep 2026, QAD is listed in the CSA STAR registry with a Level 2 certification dated 26 Jan 2017. As of 17 Sep 2026, the CSA STAR Level 2 listing is built on an underlying ISO/IEC 27001 certification also dated 26 Jan 2017. As of 17 Sep 2026, QAD is listed in the EU-US Data Privacy Framework registry as Active for EU-US Certification, SW-US Certification and UK Extension Certification. As of 17 Sep 2026, the EU-US Data Privacy Framework listing shows an original certification date of 25 Apr 2017 and an expiry date of 24 Oct 2026. As of 17 Sep 2026, no public evidence was found for SOC 2, PCI DSS or FedRAMP for QAD.
- CSA STAR: Level 2 listing dated 26 Jan 2017, built on an ISO/IEC 27001 certification, as of 17 Sep 2026.
- EU-US Data Privacy Framework: listed as Active (EU-US, SW-US, UK Extension), certified 25 Apr 2017, expires 24 Oct 2026, as of 17 Sep 2026.
- No public evidence found for SOC 2, PCI DSS or FedRAMP, as of 17 Sep 2026.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 27 Sep 2026; it is regenerated whenever a row changes.
Among manufacturing and industrial vendors
2verified rows
Category median 1, across 48 indexed manufacturing and industrial vendors. QAD has more verified rows than 94 percent of them.
cloud erperpmanufacturing softwaresupply chain
Compare with similar vendors
Pick your own comparisonCompliance grid
ISO/IEC 27001ReportedCSA STAR Level 2 certification on the registry, which is built on an ISO/IEC 27001 certification
as of 26 Oct 20266 sources
CSA STARVerifiedSTAR Level 2 certification
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Manufacturing and industrial category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Plex Systems
Manufacturing and industrial
Plex Systems, Inc. is an American software company based in Troy, Michigan
TradeCentric
E-commerce
The TradeCentric Platform is a system-agnostic, fully managed solution that integrates with leading eCommerce systems and eProcurement/ERP
Global Shop Solutions
Manufacturing and industrial
From quote to cash and everything in between, Global Shop Solutions ERP software will become the most valuable asset at your
Aptean
Manufacturing and industrial
Run your business with software built for your
Evidence against regulations
All regulations for QADHow much of each regulation’s vendor requirements QAD’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read