SOC 3-Compliant DevOps & Monitoring Vendors
DevOps & Monitoring vendors are evaluated against SOC 3 when they handle the workflows this framework governs. Currently, 9 vendors in our DevOps & Monitoring category hold SOC 3 certification. Each listing below links to the vendor's full compliance profile.
DevOps & Monitoring vendors that hold SOC 3 certification
GitHub
13/32Code hosting platform with version control, CI/CD, and collaboration tools.
Microsoft 365 app certification confirms SOC 3: Yes
Mendix
13/32Low-code application development platform, owned by Siemens.
Freshservice
10/32IT service management (ITSM) platform from Freshworks.
Google Apigee
10/32API management platform, part of Google Cloud.
JFrog
7/32DevOps platform for artifact management, binary repositories, and software supply chain security.
Rollbar
5/32Real-time error monitoring and crash reporting platform for applications.
Zapier
4/32No-code workflow automation and app integration platform.
Make
4/32Visual workflow automation and integration platform (formerly Integromat).
n8n
3/32Workflow automation platform with a self-hostable, source-available core.
These devops & monitoring vendors do not currently hold SOC 3 certification:
- Datadog (not documented)
- PagerDuty
- MongoDB Atlas (not documented)
- Supabase (not documented)
- ServiceNow (not documented)
- GitLab (not documented)
- Bitbucket (not documented)
- CircleCI (not documented)
- Travis CI (not documented)
- Jenkins (not documented)
- Postman (not documented)
- Sentry (not documented)
- LaunchDarkly (not documented)
- New Relic (not documented)
- AppDynamics (not documented)
- Grafana Cloud (not documented)
- Honeycomb (not documented)
- Bugsnag (not documented)
- Bubble (not documented)
- Retool (not documented)
- OutSystems (not documented)
- Betty Blocks (not documented)
- Glide (not documented)
- Softr (not documented)
- SolarWinds (not documented)
- ManageEngine (not documented)
- Datto RMM (not documented)
- ConnectWise (not documented)
- Kaseya (not documented)
- NinjaOne (not documented)
- Kong (not documented)
- MuleSoft (not documented)
- Tyk (not documented)
- BrowserStack (not documented)
- Sauce Labs (not documented)
- LambdaTest (not documented)
- TestRail (not documented)
- Cypress.io (not documented)
- Applitools (not documented)
- SonarQube (not documented)
Know a vendor we're missing?