Cloud monitoring and analytics platform for infrastructure, applications, and logs.

Listed on Datadog Trust Center at trust.datadoghq.com

Fully managed cloud database service with multi-cloud support.

Listed on MongoDB Trust Portal

Cloud platform for IT service management, workflow automation, and enterprise operations.

Code hosting platform with version control, CI/CD, and collaboration tools.

Listed on GitHub security page and Microsoft certification

Low-code application development platform, owned by Siemens.

IT service management (ITSM) platform from Freshworks.

API management platform, part of Google Cloud.

API platform for building, testing, and documenting APIs.

DevOps platform for artifact management, binary repositories, and software supply chain security.

Incident management and digital operations platform for IT teams.

Listed on PagerDuty security page and assurance profile

Observability and application performance monitoring (APM) platform.

Integration and API management platform (Anypoint Platform), part of Salesforce.

Cloud-based cross-browser and mobile app testing platform.

Git-based source code repository and CI/CD platform from Atlassian.

Varies by product scope

Feature management and experimentation platform for software delivery.

Real-time error monitoring and crash reporting platform for applications.

Type I and Type II

Open-source Firebase alternative with PostgreSQL database, auth, and storage.

Listed on Supabase security page and trust center

Observability platform for distributed tracing and debugging production systems.

No-code workflow automation and app integration platform.

Visual workflow automation and integration platform (formerly Integromat).

Low-code platform for building internal business applications.

Low-code application development platform.

Available to Sentry-entitled (higher tier) customers

Remote monitoring and management platform for MSPs, part of Kaseya.

Covered under parent company Kaseya's trust center program

IT management and security software suite for MSPs.

API gateway and AI/API connectivity platform.

Open-source API gateway and management platform.

DevSecOps platform for source code management, CI/CD, and software delivery.

Application monitoring and error-tracking platform for developers.

Type I and Type II

Managed observability platform (metrics, logs, traces, dashboards) from Grafana Labs.

Application stability monitoring and error tracking tool, owned by SmartBear.

Referenced at SmartBear parent-company trust center level; not itemized separately for Bugsnag

Workflow automation platform with a self-hostable, source-available core.

IT infrastructure monitoring and management software.

SOC 2 Type II available for specific products (Pingdom, Loggly, Service Desk, Observability SaaS)

IT management software suite (ITSM, endpoint, network, security), part of Zoho.

Unified IT and endpoint management platform for MSPs and IT teams.

Cloud-based continuous testing platform for web and mobile apps.

Continuous integration and continuous delivery (CI/CD) platform.

No-code platform for building web applications.

No-code application development platform.

Business management and RMM/PSA software suite for MSPs.

Static code analysis and code quality/security platform, by Sonar (SonarSource).

No-code platform for building mobile and web apps from spreadsheets/data.

Test case management software, part of Idera.

Referenced via dedicated SOC 2 compliance page; badge/report not independently verified from this page

JavaScript end-to-end testing framework and cloud (Cypress Cloud).

Application performance monitoring (APM) and observability platform, owned by Cisco (part of Splunk).

Now under Splunk/Cisco ownership; compliance largely follows the parent's programs, not itemized separately for AppDynamics

Cloud-based cross-browser testing platform (rebranded as TestMu AI).

Referenced on company trust page; full public report not independently confirmed