Netlify: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-10-24 08:45 UTCwww.netlify.com

Summary

Netlify’s Trust page replaced its SOC 2 Type II independent-audit statement with a GDPR alignment statement. The page no longer displays that audit description in this section; this does not establish that Netlify’s certification or compliance status changed.

Machine-written from the diff below (Sol; type: wording only). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Netlify removed; blue is what they added. Muted text is unchanged context.

Changed#1

…Netlify is reviewed and trusted by Compliance programs ~~SOC 2 Type II Independent audit of our security, availability, and confidentiality controls.~~ Document inventory Security and compliance reports, policies, and…

…Netlify is reviewed and trusted by Compliance programs GDPR Aligned with the EU General Data Protection Regulation. Document inventory Security and compliance reports, policies, and…

Compared with the previous archived version (#5199 to #6935). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 22
Before captured 08:44 UTC
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on Oct 23, 11:49 UTC. Record hash fc643a81e859c1b6…
Download proof
Oct 24
After captured 08:45 UTC
In the 2026-10-24 checkpoint, timestamped by FreeTSA and DigiCert on Oct 25, 00:41 UTC. Record hash f99f5d4646835ea5…
Download proof

History of this page

Thursday, October 29

1 page change

Content changed
08:44Page change
Trust pagechanged
Netlify’s Trust page added compliance disclosures covering SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27018:2019, PCI DSS, privacy frameworks, and other regulatory safeguards. It also lists HECVAT415 as available on request, giving customers another document to request during security and compliance reviews.

Saturday, October 24

1 page change

Content changed
08:45Page change
Trust pagechangedthis change
Netlify’s Trust page replaced its SOC 2 Type II independent-audit statement with a GDPR alignment statement. The page no longer displays that audit description in this section; this does not establish that Netlify’s certification or compliance status changed.

Thursday, October 22

1 page change

Content changed
08:44Page change
Trust pagechanged
Netlify’s trust page removed references to ISO/IEC 27001, ISO/IEC 27018:2019, third-party penetration testing, PCI DSS, PCI DSS v4.0.0 and GDPR alignment. Customers reviewing security and compliance have less information on this page; the removal does not establish that the underlying certifications or practices changed.

Monday, October 19

1 page change

Content changed
08:45Page change
Trust pagechanged
Netlify’s Trust page added request-only access to “PCI-DSS-v4.0.1-AOC-SAQ-D-SP-” and “PCI DSS v4.0.1 Responsibility Matrix,” giving customers additional PCI DSS documentation to request for compliance reviews.

Cite this

Trust page changed on Netlify’s Trust page, changed 2026-10-24 08:45 UTC (change 3 of 4).

Title: Trust page changed
Vendor: Netlify
Date: 2026-10-24 08:45 UTC
URL: https://rewindex.com/change/p6935

All Netlify changes Netlify profile Markdown JSON