Trust Center

Security and
trust at Axiad

The page your security review starts from. Certifications, product authorization status, corporate identifiers, and a direct path to our audit reports and assessment materials.

FR2333756970

FedRAMP Marketplace ID

6SG58

CAGE code

MGKAB33LAQ36

Unique Entity ID (SAM.gov)

Request security documents

Submit your request and we'll follow up with secure access.

Document

SOC 2 Type II Report (& Bridge Letters) Penetration Test Report FedRAMP Authorization Documentation Vulnerability Scan Reports

Please select at least one document.

Work email

Please enter a valid work email address.

Please confirm you're not a robot.

Something went wrong and your request was not sent. Please try again, or email federal@axiad.com.

Thank you for your request.
Our team will review it and follow up by email. Some materials may require an NDA before they can be shared.

Some materials are shared under NDA.

Proven impact

Certifications and compliance

Independently verified standards and the frameworks our programs align to.

SOC 2 Type II

Annual independent attestation

ISO/IEC 27001

Information security management

FedRAMP Moderate

Axiad Conductor

NIST 800-53

Security and privacy controls

GDPR

EU data protection

CCPA

California consumer privacy

CSA STAR

Cloud security assurance

Products

Status
by product

Authorization and service status,
stated per product.

Axiad Conductor

Credential and certificate lifecycle

FedRAMP Moderate Authorized

Conductor is FedRAMP Moderate Authorized and runs in production at the Department of Justice.

FedRAMP Marketplace ID

Axiad Mesh

Identity risk management

SaaS

Conductor is FedRAMP Moderate Authorized and runs in production at the Department of Justice.

Service status

status.mesh.axiad.io

Security practices

The items evaluators ask for most.

Independent assessment

Axiad holds ISO/IEC 27001 and SOC 2 Type II. Current reports and attestations are available on request.

Vulnerability and penetration testing

Third-party penetration testing and recurring vulnerability scans. Current reports are available on request.

Encryption

Data is encrypted in transit and at rest using industry-standard algorithms.

Access control

Role-based access control with least privilege and multi-factor authentication.

Monitoring

Continuous security monitoring and incident response procedures with 24/7 coverage.

Infrastructure

Redundant, geographically distributed infrastructure with automatic failover.

Documentation under NDA

Architecture, boundary diagrams, and assessment artifacts are available to evaluating customers under NDA.

Reporting a security issue

Report suspected vulnerabilities or incidents through our security incident form.

Service status

Live availability and incident history.

View service status

Report a security incident

Vulnerabilities, suspected incidents, or abuse

Report an incident

Frequently asked questions

How do I get the SOC 2 Type II report?

Use the request form with your work email and select the SOC 2 Type II Report. Bridge letters covering the period since the last report are included.

How long does a document request take?

We follow up within one business day with secure access. Some materials require an NDA before they are shared.

Which Axiad products are FedRAMP authorized?

Axiad Conductor is FedRAMP Moderate Authorized, FedRAMP Marketplace ID FR2333756970. Authorization materials are available through the request form.

Can I get architecture or boundary diagrams?

Yes. Architecture, boundary diagrams, and assessment artifacts are shared with evaluating customers under NDA.

Where is the Data Processing Addendum?

The Axiad Data Processing Addendum is published with our other legal terms.

How do I report a security issue?

Use the security incident form. Service status for Mesh is published at status.mesh.axiad.io.

Back

Back

Back

Back