ActiveCampaign: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-10-22 09:01 UTCtrust.activecampaign.com

Summary

ActiveCampaign’s trust page added Full Disk Encryption and Data Loss Prevention to its listed security controls, giving customers additional documented controls to review during security assessments.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what ActiveCampaign removed; blue is what they added. Muted text is unchanged context.

Added#1

…Cloud Service Provider Separate Production Environment Endpoint Security nothing here Zero Trust Network Access MDM System Utilized Legal…

…Cloud Service Provider Separate Production Environment Endpoint Security Full Disk Encryption Zero Trust Network Access MDM System Utilized Legal…

Added#2

…View ‹count› more Product Security control Network Security nothing here Wireless Security Subprocessors View all Amazon Web Services…

…View ‹count› more Product Security control Network Security Data Loss Prevention Wireless Security Subprocessors View all Amazon Web Services…

Compared with the previous archived version (#1019 to #5422). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 17
Before captured 19:42 UTC
In the 2026-10-17 checkpoint, timestamped by FreeTSA and DigiCert on Oct 19, 23:18 UTC. Record hash 6369e8c18f791802…
Download proof
Oct 22
After captured 09:01 UTC
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on Oct 23, 11:49 UTC. Record hash e1374252bd2162b5…
Download proof

History of this page

YesterdaySunday, October 25Sun, Oct 25

1 page change

Content changed
08:59Page change
Trust pagechanged
ActiveCampaign’s Trust page added “about” to the controls update timestamp wording. This is a wording-only change with no shown change to controls or customer-facing functionality.

Friday, October 23

1 page change

Content changed
08:57Page change
Trust pagechanged
ActiveCampaign added a security notice for PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. Its Security team is reviewing them and taking measures where needed under its standard vulnerability management process; customers do not need to take action at this time.

Thursday, October 22

1 page change

Content changed
09:01Page change
Trust pagechangedthis change
ActiveCampaign’s trust page added Full Disk Encryption and Data Loss Prevention to its listed security controls, giving customers additional documented controls to review during security assessments.

All ActiveCampaign changes ActiveCampaign profile Markdown JSON