Cloudsmith: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-11-14 09:02 UTCtrust.cloudsmith.com

Summary

Cloudsmith’s Trust page added “Cybersecurity insurance maintained” and removed “Vulnerability and system monitoring procedures established” and “Physical access processes established” from the displayed controls. Customers reviewing security assurances have different disclosures to assess; the diff does not establish whether the underlying practices changed.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Cloudsmith removed; blue is what they added. Muted text is unchanged context.

Changed#1

…access MFA enforced View ‹count› more Infrastructure security ~~controls~~ Organizational security Anti-malware technology utilized MDM system utilized…

…access MFA enforced View ‹count› more Infrastructure security control Organizational security Anti-malware technology utilized MDM system utilized…

Changed#2

…Product security Data encryption utilized Control self-assessments conducted ~~Vulnerability and system monitoring procedures established Internal security procedures~~ Board charter documented Management roles and responsibilities defined…

…Product security Data encryption utilized Control self-assessments conducted Internal security procedures Cybersecurity insurance maintained Board charter documented Management roles and responsibilities defined…

Removed#3

…Board charter documented Management roles and responsibilities defined ~~Physical access processes established~~ View ‹count› more Internal security procedures controls Opens…

…Board charter documented Management roles and responsibilities defined removed View ‹count› more Internal security procedures controls Opens…

Compared with the previous archived version (#9678 to #21950). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 28
Before captured 09:00 UTC
In the 2026-10-28 checkpoint, timestamped by FreeTSA and DigiCert on Oct 29, 00:43 UTC. Record hash e040fc9ce964a3d1…
Download proof

Rewindex captured a newer version after the last checkpoint; the next run (00:41 UTC) commits it.

History of this page

YesterdaySaturday, November 14Sat, Nov 14

1 page change

Content changed
09:02Page change
Trust pagechangedthis change
Cloudsmith’s Trust page added “Cybersecurity insurance maintained” and removed “Vulnerability and system monitoring procedures established” and “Physical access processes established” from the displayed controls. Customers reviewing security assurances have different disclosures to assess; the diff does not establish whether the underlying practices changed.

Wednesday, October 28

1 page change

Content changed
09:00Page change
Trust pagechanged
Cloudsmith’s Trust page removed “SOC 2 - System Description” and added “Physical access processes established” among its internal security procedures controls. The diff changes the listed security information but does not establish a change in certification or underlying practices.

Monday, October 26

1 page change

Content changed
12:13Page change
Trust pagechanged

Cite this

Trust page changed on Cloudsmith’s Trust page, changed 2026-11-14 09:02 UTC (change 3 of 3).

Title: Trust page changed
Vendor: Cloudsmith
Date: 2026-11-14 09:02 UTC
URL: https://rewindex.com/change/p21950

All Cloudsmith changes Cloudsmith profile Markdown JSON