Red Hat
Security and trust center evidence
OpenShift is Red Hat's free, auto-scaling Platform as a Service (PaaS) for
Summary
Red Hat has 3 registry-verified rows and 1 third-party reported row in the CertReports index, last verified 2 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Red Hat is listed in the FedRAMP registry as FedRAMP Authorized as of 19 Sep 2026, issued 9 Aug 2023 with an assessment by Coalfire Systems, Inc. Red Hat is listed in the CSA STAR registry as of 17 Sep 2026 with a STAR Level 2 certification issued 15 Apr 2013. The CSA STAR registry listing states Red Hat's ISO/IEC 27001 certification, issued 15 Apr 2013, underlies its STAR Level 2 certification as of 17 Sep 2026. Red Hat is listed in the EU-US Data Privacy Framework registry as of 17 Sep 2026 with active EU-US, Swiss-US and UK Extension certifications. Red Hat's Data Privacy Framework certification was issued 27 Apr 2026 and expires 27 Apr 2027, as of 17 Sep 2026.
- FedRAMP Authorized, listed in FedRAMP registry as of 19 Sep 2026 (issued 9 Aug 2023, assessed by Coalfire Systems, Inc.).
- CSA STAR Level 2 certification listed as of 17 Sep 2026 (issued 15 Apr 2013), stated to be built on an ISO/IEC 27001 certification.
- Listed in EU-US Data Privacy Framework registry as of 17 Sep 2026 (issued 27 Apr 2026, expires 27 Apr 2027).
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among cloud and hosting vendors
3verified rows
Category median 0, across 145 indexed cloud and hosting vendors. Red Hat has more verified rows than 94 percent of them.
application-platformcontainer-orchestrationkubernetespaas
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 2 Nov 202647 sources · Coalfire Systems, Inc.
ISO/IEC 27001ReportedCSA STAR Level 2 certification on the registry, which is built on an ISO/IEC 27001 certification
as of 26 Oct 20266 sources
CSA STARVerifiedSTAR Level 2 certification
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports4 evidence rows across 4 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Cloud and hosting category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
DataBank
Cloud and hosting
DataBank’s Managed Cloud transforms our Standard Cloud (IaaS) service into a comprehensively managed Platform-as-a-Service (PaaS)
Skyhook
Developer tools
PaaS-like experience with the power of Kubernetes, on your cloud
Aptible
Cloud and hosting
The No Infrastructure Platform as a Service
CoreOS
DevOps and observability
Open source tools of modern distributed systems.
Evidence against regulations
All regulations for Red HatHow much of each regulation’s vendor requirements Red Hat’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read