xMatters
Security and trust center evidence
Introducing adaptive incident management for a changing world Automate on-call management: Replace inaccurate, high-maintenance
Summary
xMatters has 1 registry-verified row, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is CSA STAR: STAR Level 1 self-assessment (CAIQ). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 1 registry-verified row and 1 expired row for xMatters, drawn from the CSA STAR registry and the Data Privacy Framework list. xMatters is listed in the CSA STAR registry for CSA STAR (STAR Level 1 self-assessment (CAIQ)), dated 14 Apr 2021. xMatters previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 2 Nov 2026. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA and GDPR as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- CSA STAR: STAR Level 1 self-assessment (CAIQ), verified as of 26 Oct 2026
- EU-US Data Privacy Framework: Inactive, expired as of 2 Nov 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among devops and observability vendors
1verified rows
Category median 1, across 193 indexed devops and observability vendors. xMatters has more verified rows than 44 percent of them.
alertingincident managementincident responseon-call scheduling
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the DevOps and observability category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Rootly
Developer tools
AI-native on-call and incident response carefully crafted to help…
PagerDuty
DevOps and observability
Real-time visibility into critical apps and services all in one place.
Uptime.ly
DevOps and observability
Create public or private status pages, send multi-channel updates, and automate incident communication with Xurrent IMR’s customizable
ScienceLogic
IT management
ScienceLogic is a leader in IT Operations Management, providing modern IT operations with actionable insights to predict and resolve
Evidence against regulations
All regulations for xMattersHow much of each regulation’s vendor requirements xMatters’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read