From the Compliance page in the Redocly platform, view and download Redocly's compliance and security reports. The available reports are SOC 2 Type 2, Penetration test, and CAIQ. You can also download Redocly's ISO/IEC 27001:2022 certificate.
The CAIQ (Consensus Assessments Initiative Questionnaire) is a survey provided by the Cloud Security Alliance (CSA). Cloud consumers and auditors use it to assess the security capabilities of a cloud service provider.
Redocly holds ISO/IEC 27001:2022 certification for information security management. The certificate's Statement of Applicability also includes the control sets of these standards:
- ISO/IEC 27017: cloud-specific security controls
- ISO/IEC 27018: protection of personally identifiable information (PII) in the cloud
Download Redocly's security and compliance reports if you need a copy for your security or legal team.
To download the security reports:
- Select Compliance in the navigation menu on the left side of the page.
- Click Download for the compliance report.
- Click the download icon in the top left corner of the report viewer.
- Manage your organization - Set up the details and manage your Redocly organization
- About Redocly platform - Explore Redocly's collaborative content management and project workflow capabilities
- Manage teams - Organize users into teams with role-based permissions for effective collaboration and access control