Trust Center
🛡️ Welcome to Redpanda's Trust Center
Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
🎯 Select Your Product
Redpanda's controls span two product lines — choose the one in scope for your review:
🐼 Redpanda Data Streaming
Cloud Managed Services: Dedicated, BYOC/BYOVPC, Serverless
🤖 Redpanda Agentic Data Plane (ADP)
AI Gateway, MCP, and governed agent access
📅 Document Publication Schedule
These are general estimates based on our typical release cadence — not guarantees.
| Document | Refresh Cycle | Next Expected Update |
| SOC 2 Type II Report | Annual | End of August (last updated Aug 2026) |
| Penetration Test Report | Annual | End of August |
| ISO 27001 / ISO 42001 Certificates | Annual | Initial issuance targeted Dec 2026; annual surveillance thereafter |
| Cloud Security Whitepaper | As needed | Following material architecture changes |
| Cyber Insurance | Annual | End of July |
| Policies | Annual and as needed | March / April, or following material changes |
Subprocessors
Trust Center Updates
We've published our newest SOC 2 Type II report, covering the audit period from July 2025 through June 2026. This report reflects an independent examination of the controls we maintain to protect your data across the platform, and it's now live in the Trust Center under Featured Documents. If you're mid-review or renewing an assessment, this is the version to request — reach out via Get Access to download it.
No more guessing when a document is due for a refresh. We've added a Document Publication Schedule to the Overview page that lays out exactly when to expect updated versions of our SOC 2 report, penetration test results, ISO certifications, and policies — most on a predictable annual cycle, others as needed when something material changes. If you're planning a renewal or a vendor reassessment around one of these documents, this is the fastest way to know what's coming and when, without pinging us directly.