Sauce Labs
Security and trust center evidence
What is Sauce Labs? Sauce Labs makes software work for everyone, when they want it
Summary
SOC 2Verified
GDPRVendor-stated
ISO 27001Vendor-stated
CSA STARVerified
ISO 27701Vendor-statedISO 42001Vendor-statedSOC 3Verified
DPFVerified
CCPAVendor-statedSauce Labs has 4 registry-verified rows and 5 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Evidenced by the public SOC 3 report for the same examination period. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Sauce Labs has a SOC 2 Type II report evidenced by its public SOC 3 report for the period ending 30 Nov 2025, issued 12 Dec 2025, as of 28 Sep 2026. Sauce Labs is listed in CSA STAR at Level 1 self-assessment (CAIQ), submitted 7 Jul 2022, as of 17 Sep 2026. Sauce Labs is listed in the EU-US Data Privacy Framework registry as active, covering the EU-US Certification, SW-US Certification and UK Extension Certification, originally certified 4 Sep 2020 and expiring 17 Jun 2027, as of 17 Sep 2026. Sauce Labs states on its trust centre that it holds ISO/IEC 27001:2022, ISO/IEC 27701:2019 and ISO/IEC 42001:2023, as of 28 Sep 2026. Sauce Labs states on its trust centre that it meets GDPR and CCPA/CPRA, as of 28 Sep 2026.
- SOC 2 / SOC 3: has a SOC 2 Type II report evidenced by its public SOC 3 report, period ending 30 Nov 2025, issued 12 Dec 2025, as of 28 Sep 2026
- CSA STAR: Level 1 self-assessment (CAIQ), issued 7 Jul 2022, as of 17 Sep 2026
- EU-US Data Privacy Framework: listed active, issued 4 Sep 2020, expires 17 Jun 2027, as of 17 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 28 Sep 2026; it is regenerated whenever a row changes.
Among developer tools vendors
4verified rows
Category median 0, across 220 indexed developer tools vendors. Sauce Labs has more verified rows than 100 percent of them.
ci/cdcontinuous testingcross-browser testingtest automation
Compare with similar vendors
Pick your own comparisonCompliance grid
- SOC 2Verified
Evidenced by the public SOC 3 report for the same examination period
as of 2 Nov 20261 source - GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 30 Sep 20262 sources - ISO/IEC 27001Vendor-stated
Vendor states ISO/IEC 27001: 2022 on its trust centre
as of 30 Sep 20262 sources - CSA STARVerified
STAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources - ISO/IEC 27701Vendor-stated
Vendor states ISO/IEC 27701: 2019 on its trust centre
as of 30 Sep 20262 sources - ISO/IEC 42001Vendor-stated
Vendor states ISO/IEC 42001: 2023 on its trust centre
as of 30 Sep 20262 sources - SOC 3Verified
Public SOC 3 report on the vendor's trust centre
as of 2 Nov 20261 source - EU-US Data Privacy FrameworkVerified
Active: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 20261 source - CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 30 Sep 20262 sources
No public evidence yet for HIPAA, FedRAMP, PCI DSS, Cyber Essentials. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Legal artefacts
Subprocessors (13)
Akamai (Linode LLC)Engineering · 145 Broadway Cambridge, MA 02142 USA
Amazon Web Services, Inc.Cloud provider · 410 Terry Avenue North Seattle WA 98109 United States
Atlassian/JiraCollaboration · Level 6, 341 George Street Sydney NSW 2000 Australia
BeamerProduct · 3500 S Dupont Hwy Dover, DE, 19901-6041 USA
Confluent/KafkaData storage and processing · 899 West Evelyn Mountain View, CA 94041
Fivetran/EtleapData analytics · 164 Townsend 94107 San Francisco
Google Cloud PlatformCloud provider (Google Cloud Platform, Looker, Gemini AI, Vertex API) · 1600 Amphitheatre Pkwy, Mountain View, California, United States.
Mailchimp (The Rocket Science Group, LLC )Product · 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA
MongoDBData storage and processing · 1633 Broadway 38th Floor New York, NY 10019 United States
SalesforceService Cloud (Support) · 3rd Floor, 415 Mission Street, San Francisco, California, 94105- Sauce Labs Group SubprocessorSauce Labs Inc (Delaware), Sauce Labs Europe Services GmbH, Sauce Labs Europe GmbH (Berlin), Sauce Labs Canada, Inc. (British Columbia), Sauce Labs Software UK Ltd. (England), Sauce Labs Poland Sp. Z o.o., Sauce Labs India Pvt Ltd
SnowflakeData storage and processing · Suite 3A, 106 East Babcock Street, Bozeman, Montana 59715- WAWayfoundData analytics (Wayfound Agent Manager) · 412 S Dawson St, Raleigh, NC 27601
Security profile
- Pen test cadence
- annual
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 25 Sep 2026SOC 2 state changedState moved from Vendor-stated to Verified.
- 25 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Verified.
- 18 Sep 2026Subprocessor added: Amazon Web Services, Inc.Amazon Web Services, Inc. appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Atlassian/JiraAtlassian/Jira appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: BeamerBeamer appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Confluent/KafkaConfluent/Kafka appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Fivetran/EtleapFivetran/Etleap appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Google Cloud PlatformGoogle Cloud Platform appeared on the subprocessor list.
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Developer tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
testRigor
Developer tools
Executable specifications in English for test automation
BrowserStack
Developer tools
BrowserStack’s mission is to empower developers to build amazing
CircleCI
Developer tools
CircleCI provides a CI/CD cloud environment for software engineers to test their code and deploy
ACCELQ
No-code and automation
ACCELQ is the most powerful software testing tool to achieve Codeless test automation and accelerate continuous
Evidence against regulations
All regulations for Sauce LabsHow much of each regulation’s vendor requirements Sauce Labs’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read