Trust
Tricentis Security
Tricentis strives to implement and continuously execute a proactive strategy for security and compliance. As a leader in test automation for cloud and enterprise applications, we are dedicated to providing peace of mind to our customers by applying policies and procedures designed to keep our data, platform, and products secure. Although no security program is 100% immune to compromise, we utilize security controls that exceed the standards for the environments in which we operate.
Compliance
Our security program is designed to mitigate risk using a combination of industry best practices and published standards:
SOC 2 Type 2
Tricentis conducts a SOC 2 Type 2 audit on an annual basis to test the design and operating effectiveness of the controls relevant to Security and Availability. A SOC 2 audit is performed to provide our customers with the assurance that we have the controls in place to protect their information and data through secure systems. Tricentis currently undergoes SOC2 Type 2 for qTest, Testim, NeoLoad, Vera, VisionAI, Tosca Cloud, Tricentis Testim Salesforce, and Tricentis Test Management for JIRA.
SOC2 reports can be downloaded from the Tricentis Security Center.
ISO/IEC 27001
Tricentis’ Information Security Management System (ISMS) is certified through the ISO 27001: 2022 standard annually, over a 3-year certification cycle. ISO 27001 tests against the requirements for the establishment, implementation, maintenance and continual improvement of the ISMS. An ISO 27001 audit is performed to demonstrate to our stakeholders that information security is taken seriously. In-scope products are Tricentis Tosca On Prem, Cloud and VisionAI, LiveCompare, qTest, NeoLoad, Testim, Vera, Tricentis Test Management for JIRA, and Tricentis Testim Salesforce.
An ISO 27001 certificate can be downloaded from the Tricentis Security Center.
ISO 27701
Tricentis’ Privacy Information Management System (PIMS) is certified through the ISO 27701: 2019 standard annually, over a 3-year certification cycle. ISO 27701 tests against the requirements for the establishment, implementation, maintenance and continual improvement of the PIMS. An ISO 27701 audit is performed to demonstrate to our stakeholders that privacy is taken seriously. In-scope products are Tricentis Tosca On Prem, Cloud and VisionAI, LiveCompare, qTest, NeoLoad, Testim, Vera, Tricentis Test Management for JIRA, and Tricentis Testim Salesforce.
An ISO 27701 certificate can be downloaded from the Tricentis Security Center.
ISO 9001
Tricentis’ Quality Management System (QMS) is certified through the ISO 9001 standard annually, over a 3-year certification cycle. ISO 9001 tests against the requirements for the establishment, implementation, maintenance and continual improvement of the QMS. An ISO 9001 audit is performed to demonstrate to our stakeholders that quality management is taken seriously. In-scope products are Tricentis Tosca On Prem, Cloud and VisionAI, LiveCompare, qTest, NeoLoad, Testim, Vera, Tricentis Test Management for JIRA, and Tricentis Testim Salesforce.
An ISO 9001 certificate can be downloaded from the Tricentis Security Center.
Pillars
Tricentis’ security program delivers against well-established pillars of trust.
Disclosure
Responsible Disclosure
If you have discovered a vulnerability in a Tricentis application, please don’t share it publicly. Instead, please submit a report to us through a support ticket. We review all security concerns that are submitted and we strive to stay aware of the latest security developments by monitoring the threat landscape and by working with external security researchers and companies.
If you believe your account has been compromised or you are seeing suspicious activity on your account, please report it to your application administrator and support@tricentis.com.
