Valimail
Security and trust center evidence
Protect your business from phishing and spoofing 4x faster with Valimail’s automated DMARC, DKIM, and SPF email authentication
Summary
Valimail has 1 registry-verified row and 2 vendor-stated rows, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Valimail states on its trust centre that it holds SOC 2, as of 10 Oct 2026. Valimail states on its trust centre that it also holds SOC 3, as of 10 Oct 2026. Valimail is listed in the FedRAMP registry as Authorized, with authorization issued 02 Aug 2018 and audited by Coalfire Systems, Inc., as of 09 Oct 2026. Valimail's EU-US Data Privacy Framework certification, issued 20 Dec 2017, is listed as expired, as of 05 Oct 2026. No public evidence was found for ISO/IEC 27001 for Valimail as of 10 Oct 2026.
- SOC 2 and SOC 3: vendor states on its trust centre (as of 10 Oct 2026)
- FedRAMP: listed in FedRAMP registry as Authorized, issued 02 Aug 2018, audited by Coalfire Systems, Inc. (as of 09 Oct 2026)
- EU-US Data Privacy Framework: expired, issued 20 Dec 2017 (as of 05 Oct 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 10 Oct 2026; it is regenerated whenever a row changes.
Among identity and access vendors
1verified rows
Category median 1, across 78 indexed identity and access vendors. Valimail has more verified rows than 42 percent of them.
dmarcemail authenticationphishing preventionspoofing protection
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 2 Nov 202622 sources
FedRAMPVerifiedFedRAMP Authorized
as of 2 Nov 202647 sources · Coalfire Systems, Inc.- SOC 3Vendor-stated
Vendor states SOC 3 on its trust centre
as of 2 Nov 202622 sources 
EU-US Data Privacy FrameworkExpiredInactive
as of 2 Nov 20261 source
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 2 Nov 2026.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Identity and access category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Skysnag
Identity and access
Skysnag, Inc. is a cybersecurity SaaS provider specializing in automated email authentication and domain protection. The Skysnag platform enables organiza...
Palo Alto Networks
Identity and access
Protect your organization with
Auth0
Identity and access
Secure users, AI agents, and more with Auth0, an easy-to-implement, scalable, and adaptable authentication and authorization
Secure Data Recovery Services
Identity and access
Protect your data with a SecureDrive encrypted hard drive, featuring two-factor authentication, password protection, auto-lock, remote
Evidence against regulations
All regulations for ValimailHow much of each regulation’s vendor requirements Valimail’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read