Docker is pleased to announce that we have received our SOC 2 Type 2 attestation and ISO 27001 certification with no exceptions or major non-conformities.\u00a0<\/p>\n
Security is a fundamental pillar to Docker\u2019s operations, which is embedded into our overall mission and company strategy. Docker\u2019s products are core to our user community and our SOC 2 Type 2 attestation and ISO 27001 certification demonstrate Docker\u2019s ongoing commitment to security to our user base.<\/p>\n
Defined by the American Institute of Certified Public Accountants (AICPA), a System and Organization Controls (SOC)<\/a> is a suite of reports produced during an audit. A SOC 2 Type 2 is an audit report or attestation that evaluates the design and operating effectiveness of internal controls of information systems over five criteria principles, known as the Trust Services Principles: Security (also referred to as the common criteria), Availability, Confidentiality, Processing Integrity, and Privacy.<\/p>\n The International Organization for Standardization (ISO)<\/a> is an independent, non-governmental international organization of national standards bodies. ISO was established in 1947 and has a long history of producing standards, requirements, and certifications to demonstrate different control environments.<\/p>\n ISO 27001<\/a> is a worldwide recognized standard for the information security management system (ISMS). An ISMS is a framework of policies, procedures, and controls for systematically managing an organization\u2019s sensitive data.\u00a0<\/p>\n Going forward, Docker will provide an annual SOC 2 Type 2 attestation and ISO 27001 certification following the timing of our fiscal year.<\/p>\n Docker is committed to providing our customers with secure products. Our compliance posture provides our commitment to lead the industry in providing developers with tools they can trust.\u00a0<\/p>\n To learn more about Docker\u2019s security posture, visit our Docker Trust Center website<\/a>. If you would like access to our compliance platform to receive the documents, fill out the Security Documentation form<\/a>, and the Docker Sales team will follow up with you.\u00a0<\/p>\n Subscribe to the Docker Newsletter<\/a>.<\/p>\n Get the latest release of Docker Desktop<\/a>.<\/p>\n Vote on what\u2019s next! Check out our public roadmap<\/a>.<\/p>\n Have questions? The Docker community is here to help<\/a>.<\/p>\nWhat is ISO 27001?<\/h2>\n
Continued compliance<\/h2>\n
Learn more<\/h2>\n