FOSSA Logo

Trust Center

Privacy-First Commitment

From its inception, FOSSA has consistently recognized privacy as an industry-wide priority and company-wide obligation.

FOSSA provides organizations with comprehensive open source management tools that help secure software supply chains and ensure compliance. We help developers identify and mitigate security and license compliance risks in their code, enabling them to build safer software.

FOSSA focuses exclusively on providing secure, privacy-conscious solutions that protect both our customers and their data.

View Privacy Policy

Compliance

SOC 2 Compliance
SOC 2 Compliance

Frequently Asked Questions

Infrastructure security

Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
+ 16 more

Organizational security

Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
+ 11 more

Product security

Data encryption utilized
Control self-assessments conducted
Penetration testing performed
+ 2 more

Internal security procedures

Continuity and Disaster Recovery plans established
Continuity and disaster recovery plans tested
Cybersecurity insurance maintained
+ 32 more

Data and privacy

Data retention procedures established
Customer data deleted upon leaving
Data classification policy established

Have questions about FOSSA's security practices?