Netlify: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-10-22 08:44 UTCwww.netlify.com

Summary

Netlify’s trust page removed references to ISO/IEC 27001, ISO/IEC 27018:2019, third-party penetration testing, PCI DSS, PCI DSS v4.0.0 and GDPR alignment. Customers reviewing security and compliance have less information on this page; the removal does not establish that the underlying certifications or practices changed.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Netlify removed; blue is what they added. Muted text is unchanged context.

Removed#1

…audit of our security, availability, and confidentiality controls. ISO/IEC 27001 Certified information security management system. ISO/IEC 27018:2019 Certified controls for protecting personal data in public cloud services. Penetration Test Regular third-party penetration testing of our platform. PCI DSS Compliance with the Payment Card Industry Data Security Standard. PCI DSS v4.0.0 Compliance with version 4.0.0 of the Payment Card Industry Data Security Standard. GDPR Aligned with the EU General Data Protection Regulation. CCPA Aligned with the California Consumer Privacy Act. HIPAA Safeguards for handling protected health information. DORA Aligned with the EU Digital Operational Resilience Act. Data Processing Addendum GDPR-aligned data processing terms available to customers. EU-US Data Privacy Framework Certified participant in the EU-US Data Privacy Framework. Swiss-US Data Privacy Framework Certified participant in the Swiss-US Data Privacy Framework. VPAT Accessibility conformance reported in a Voluntary Product Accessibility Template. Document inventory Security and compliance reports, policies, and…

…audit of our security, availability, and confidentiality controls. removed Document inventory Security and compliance reports, policies, and…

Compared with the previous archived version (#2630 to #5199). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 19
Before captured 08:45 UTC
In the 2026-10-19 checkpoint, timestamped by FreeTSA and DigiCert on Oct 20, 00:41 UTC. Record hash 61b0f1c11ac4c093…
Download proof
Oct 22
After captured 08:44 UTC
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on Oct 23, 11:49 UTC. Record hash fc643a81e859c1b6…
Download proof

History of this page

Thursday, October 29

1 page change

Content changed
08:44Page change
Trust pagechanged
Netlify’s Trust page added compliance disclosures covering SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27018:2019, PCI DSS, privacy frameworks, and other regulatory safeguards. It also lists HECVAT415 as available on request, giving customers another document to request during security and compliance reviews.

Saturday, October 24

1 page change

Content changed
08:45Page change
Trust pagechanged
Netlify’s Trust page replaced its SOC 2 Type II independent-audit statement with a GDPR alignment statement. The page no longer displays that audit description in this section; this does not establish that Netlify’s certification or compliance status changed.

Thursday, October 22

1 page change

Content changed
08:44Page change
Trust pagechangedthis change
Netlify’s trust page removed references to ISO/IEC 27001, ISO/IEC 27018:2019, third-party penetration testing, PCI DSS, PCI DSS v4.0.0 and GDPR alignment. Customers reviewing security and compliance have less information on this page; the removal does not establish that the underlying certifications or practices changed.

Monday, October 19

1 page change

Content changed
08:45Page change
Trust pagechanged
Netlify’s Trust page added request-only access to “PCI-DSS-v4.0.1-AOC-SAQ-D-SP-” and “PCI DSS v4.0.1 Responsibility Matrix,” giving customers additional PCI DSS documentation to request for compliance reviews.

Cite this

Trust page changed on Netlify’s Trust page, changed 2026-10-22 08:44 UTC (change 2 of 4).

Title: Trust page changed
Vendor: Netlify
Date: 2026-10-22 08:44 UTC
URL: https://rewindex.com/change/p5199

All Netlify changes Netlify profile Markdown JSON