Shortcut

Security and trust center evidence

Shortcut is a fast, lightweight and enjoyable project management platform where software teams and their AI agents plan, build, and ship

shortcut.com Developer toolsLast verified 2 Nov 2026

Request the report Are you Shortcut?

Shortcut has 1 registry-verified row and 3 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Shortcut states on its trust centre that it displays a HIPAA badge, though BAA availability has not yet been confirmed, as of 30 Sep 2026. Shortcut states on its trust centre that it holds SOC 2, as of 30 Sep 2026. Shortcut states on its trust centre that it holds GDPR, as of 30 Sep 2026. Shortcut is listed in the EU-US Data Privacy Framework registry as active for EU-US Certification, SW-US Certification, and UK Extension Certification, issued on 10 Nov 2022 and expiring on 13 Oct 2027, as of 26 Oct 2026. No public evidence found for PCI DSS as of 26 Oct 2026.

HIPAA - vendor states a badge on its trust centre; BAA availability not confirmed (as of 30 Sep 2026)
SOC 2 - vendor states it holds SOC 2 (as of 30 Sep 2026)
EU-US DPF - listed as active, expires 13 Oct 2027 (as of 26 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Oct 2026; it is regenerated whenever a row changes.

Among developer tools vendors

1verified rows

Category median 0, across 220 indexed developer tools vendors. Shortcut has more verified rows than 64 percent of them.

agileissue trackingproject managementsprint planning

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Public · as of 30 Sep 2026

Open

Subprocessors

No subprocessor list captured yet.

Change history

26 Oct 2026EU-US Data Privacy Framework state changedState moved from Expired to Verified.
19 Oct 2026EU-US Data Privacy Framework state changedState moved from Verified to Expired.
18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Developer tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.