CircleCI Trust Center
CI/CD is the foundation of engineering productivity and speed. At CircleCI, we know that a team’s velocity must go hand in hand with building securely.
World-class engineering teams don’t sacrifice security for speed, but rather, choose platforms like CircleCI that deliver both.
We are constantly evaluating how we can improve both our internal security posture, and how we improve security for our customers. We invite questions and conversations on security at CircleCI and look forward to working with you to improve the security of the software ecosystem as a whole. Please email CircleCI's GRC team with any questions.
For customers interested in signing a Data Processing Addendum with CircleCI, you can sign our DPA here.
CircleCI's Privacy Policy can be viewed here.
Compass Real Estate
Headspace
Lightspeed Commerce
Okta
Procore Technologies
Quizlet
Sub-Processors
CircleCI Trust Center Updates
PCI
CircleCI has completed its annual review of the PCI DSS v4.0.1 Report on Compliance (ROC) Attestation of Compliance (AOC) for Service Providers, which is now available for download.
Customers can access the document in the Trust Center.
Certificate of Liability Insurance (COI)
Updated: 2026–27 Certificate of Insurance
CircleCI's Certificate of Insurance for the 2026–2027 policy period (October 1, 2026 – October 1, 2027) is now available. This certificate includes our General Liability, Automobile, Umbrella, Workers' Compensation, and Cyber / Errors & Omissions coverage.
Customers who previously downloaded the 2026–27 certificate should replace it with this version, which reflects our complete coverage.
CircleCI has uploaded the new Certificate of Liability Insurance (COI) to the Trust Center.
The certificate evidences CircleCI's active coverage and is available for download by approved Trust Center users. This replaces the prior certificate.
Thank you.
Annual Penetration Test
CircleCI has completed its annual penetration test, and has uploaded the signed testing summary to its Trust Center. Per the test results, there were no identified issues during the assessment.
Sub-processor Update
Hello,
We are writing to inform you that CircleCI's sub-processor list has been updated.
The updated list can be found at https://trust.circleci.com. If you have any questions, please contact us at compliance@circleci.com.
Thank you
SafeBase Maintenance
On Thursday, April 2nd, between 07:00pm-8:00pm PT/10:00pm-11:00pm ET, the CircleCI SafeBase account will be included in a routine database maintenance window. During this time, you may experience brief disruptions in service.
SafeBase assures us that they will strive to minimize any inconvenience, and appreciates your understanding and support as they continue to improve their services.