rewindex

ChangesNetlifyTrust page

Netlify: Trust page changed

Trust / securityChanged (not classified) (rule)Changed www.netlify.com (opens in new tab)
Summary

Netlify’s Trust page added compliance disclosures covering SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27018:2019, PCI DSS, privacy frameworks, and other regulatory safeguards. It also lists HECVAT415 as available on request, giving customers another document to request during security and compliance reviews.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

Struck in red is what Netlify removed; blue is what they added. Muted text is unchanged context.

Added#1
Before: …Netlify is reviewed and trusted by Compliance programs nothing here GDPR Aligned with the EU General Data Protection…
After: …Netlify is reviewed and trusted by Compliance programs SOC 2 Type II Independent audit of our security, availability, and confidentiality controls. ISO/IEC 27001 Certified information security management system. ISO/IEC 27018:2019 Certified controls for protecting personal data in public cloud services. Penetration Test Regular third-party penetration testing of our platform. PCI DSS Compliance with the Payment Card Industry Data Security Standard. PCI DSS v4.0.0 Compliance with version 4.0.0 of the Payment Card Industry Data Security Standard. GDPR Aligned with the EU General Data Protection…
Added#2
Before: …Aligned with the EU General Data Protection Regulation. nothing here Document inventory Security and compliance reports, policies, and…
After: …Aligned with the EU General Data Protection Regulation. CCPA Aligned with the California Consumer Privacy Act. HIPAA Safeguards for handling protected health information. DORA Aligned with the EU Digital Operational Resilience Act. Data Processing Addendum GDPR-aligned data processing terms available to customers. EU-US Data Privacy Framework Certified participant in the EU-US Data Privacy Framework. Swiss-US Data Privacy Framework Certified participant in the Swiss-US Data Privacy Framework. VPAT Accessibility conformance reported in a Voluntary Product Accessibility Template. Document inventory Security and compliance reports, policies, and…
Added#3
Before: …compliance reports, policies, and agreements. Document Share Access nothing here PCI-DSS-v4.0.1-AOC-SAQ-D-SP- Access on request PCI DSS v4.0.1 Responsibility…
After: …compliance reports, policies, and agreements. Document Share Access HECVAT415 Access on request PCI-DSS-v4.0.1-AOC-SAQ-D-SP- Access on request PCI DSS v4.0.1 Responsibility…

Compared with the previous archived version (#6935 to #10396). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this page

Thursday, October 29

1 page change

Saturday, October 24

1 page change

Thursday, October 22

1 page change

Monday, October 19

1 page change

Cite this

Trust page changed on Netlify’s Trust page, changed 2026-10-29 08:44 UTC (change 4 of 4).

Title
Trust page changed
Vendor
Netlify
Date
URL
https://rewindex.com/change/p10396

All Netlify changesNetlify profileMarkdownJSON