Secureframe: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-11-01 08:45 UTCtrust.secureframe.com

Summary

Secureframe’s trust page added controls stating that internal personnel acknowledge applicable information security policies at least annually and complete annual security awareness training. These disclosures give customers more detail about personnel security practices.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Secureframe removed; blue is what they added. Muted text is unchanged context.

Added#1

…Restoration Testing View ‹count› more controls Organizational Management nothing here Internal Control Policy Code of Conduct View ‹count›…

…Restoration Testing View ‹count› more controls Organizational Management Personnel Acknowledge Security Policies Internal Control Policy Code of Conduct View ‹count›…

Added#2

…Plan based on the test results. Organizational Management nothing here Internal Control Policy An Internal Control Policy identifies…

…Plan based on the test results. Organizational Management Personnel Acknowledge Security Policies Internal personnel review and accept applicable information security policies at least annually. Internal Control Policy An Internal Control Policy identifies…

Added#3

…changes, audit results and/or other matters as necessary. nothing here Disciplinary Action Personnel who violate information security policies…

…changes, audit results and/or other matters as necessary. Security Awareness Training Internal personnel complete annual training programs for information security to help them understand their obligations and responsibilities related to security. Disciplinary Action Personnel who violate information security policies…

1 noise-only block(s) hidden (dates, counters, testimonials, tokens).

Compared with the previous archived version (#12010 to #12490). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 31
Before captured 08:45 UTC
In the 2026-10-31 checkpoint, timestamped by FreeTSA and DigiCert on Nov 1, 00:41 UTC. Record hash 59e494d8ac2e1725…
Download proof
Nov 1
After captured 08:45 UTC
In the 2026-11-01 checkpoint, timestamped by FreeTSA and DigiCert on Nov 2, 00:42 UTC. Record hash 015229917b1bec78…
Download proof

History of this page

TodayWednesday, November 4Wed, Nov 4

1 page change

Content changed
08:43Page change
Trust pagechanged

YesterdayTuesday, November 3Tue, Nov 3

1 page change

Content changed
08:45Page change
Trust pagechanged
Secureframe’s trust page added an Organizational Chart control stating that management maintains a formal chart identifying positions of authority and communication lines and publishes it to internal personnel. This provides customers with additional information about internal governance.

Sunday, November 1

1 page change

Content changed
08:45Page change
Trust pagechangedthis change
Secureframe’s trust page added controls stating that internal personnel acknowledge applicable information security policies at least annually and complete annual security awareness training. These disclosures give customers more detail about personnel security practices.

Saturday, October 31

1 page change

Content changed
08:45Page change
Trust pagechanged
Secureframe’s Trust page removed the “Restricted Port Configurations” control and its description covering restrictions on networking ports, protocols, services, and environments, including firewalls. Customers reviewing its security posture no longer see that control documented; the evidence does not show whether the underlying practices changed.

Monday, October 19

1 page change

Content changed
08:45Page change
Trust pagechanged
Secureframe’s trust page removed the “Information Security Program Review” statement that management is responsible for security policies and procedures and reviews them at least annually. Customers can no longer find that assurance on the page; the removal does not establish that the underlying practice changed.

Cite this

Trust page changed on Secureframe’s Trust page, changed 2026-11-01 08:45 UTC (change 3 of 5).

Title: Trust page changed
Vendor: Secureframe
Date: 2026-11-01 08:45 UTC
URL: https://rewindex.com/change/p12490

All Secureframe changes Secureframe profile Markdown JSON