Skip to content

Commit 7cc71ca

Browse files
authored
docs: point compliance page to Ory Trust Center (#2518)
Update ISO 27001 reference to ISO 27001:2022 and remove direct link to the hosted certificate PDF. Direct readers to https://trust.ory.com for the ISO certificate, SOC 2 Type 2 report, and all other compliance documentation. Also drop the now-unused iso27001 resource route.
1 parent 2f2307f commit 7cc71ca

2 files changed

Lines changed: 6 additions & 12 deletions

File tree

docs/security-compliance/compliance-and-certifications.md

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -10,21 +10,19 @@ programs and adopted the best industry practices and technologies to keep our cu
1010

1111
## ISO 27001
1212

13-
Ory holds a certificate for [ISO 27001:2013](https://www.iso.org/standard/27001), which you can can
14-
[download for inspection](https://www.ory.com/resources/iso27001/OryCorp-ISO27001-Certificate-of-Registration.pdf). You can also
15-
verify the ISO 27001:2013 certification directly with [our auditor](https://barrcertifications.com/certificate-directory/). The
16-
ISO 27001 certification verifies that Ory has an information security management system (ISMS) in place to assure the
17-
confidentiality and integrity of your data. Our internal security team is dedicated to ensuring that Ory maintains the highest
18-
standards of data protection.
13+
Ory holds a certificate for [ISO 27001:2022](https://www.iso.org/standard/27001). The ISO 27001 certification verifies that Ory
14+
has an information security management system (ISMS) in place to assure the confidentiality and integrity of your data. Our
15+
internal security team is dedicated to ensuring that Ory maintains the highest standards of data protection. To access our ISO
16+
27001 certificate and all other compliance documentation, visit the [Ory Trust Center](https://trust.ory.com).
1917

2018
## SOC 2 Type 2
2119

2220
Ory is SOC 2 Type 2 certified. SOC 2 is a framework for assessing the security, availability, processing integrity,
2321
confidentiality, and privacy of data in service organizations. It is not a standard but a certification that demonstrates that an
2422
organization's internal controls and processes meet specific criteria. The Type 2 designation indicates that an independent
2523
auditor has evaluated and tested these controls over a period of time (typically three months to a year) to ensure they are
26-
effectively implemented. Current and prospective customers interested in obtaining a copy of Orys latest SOC 2 report may request
27-
access at the [Ory Trust Center](https://trust.ory.com/).
24+
effectively implemented. Current and prospective customers interested in obtaining a copy of Ory's latest SOC 2 Type 2 report can
25+
request access at the [Ory Trust Center](https://trust.ory.com).
2826

2927
## GDPR
3028

src/components/ConsoleLink/console-routes.ts

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,10 +15,6 @@ export const routes = {
1515
twitter: "https://twitter.com/orycorp",
1616
talkToUs: "https://ory.com/talk-to-us",
1717
},
18-
resources: {
19-
iso27001:
20-
"https://www.ory.com/resources/iso27001/OryCorp-ISO27001-Certificate-of-Registration.pdf",
21-
},
2218
root: "/",
2319
"404": "/404",
2420
_500: "/500",

0 commit comments

Comments
 (0)