Source

Security / trust page — Grafana

Checked for Grafana on 1 Nov 2026

Technical details

type: page
http status: 200
content hash: sha256:ac25726d4bebdadaf0c4662b4f252ee5b0ef53cd410742db36d564c71c5f1631
permission: robots_ok
screenshot: Screenshot on file (internal exhibit, not published)

Cited by

ISO 27001 Report an error

“Certified through an independent third-party audit with A-LIGN for ISO 27001.”
SOC 2 type2 Report an error

“Certified through an independent third-party audit with A-LIGN for SOC 2.”
Pci Report an error

“Maintains PCI Compliance through third-party approved scanning vendors for the Grafana Labs corporate environment for client payment processing.”
GDPR DPA Report an error

“General Data Protection Regulation Data Processor Agreement (DPA) available.”
Csa star Report an error

“Completed CSA Security Trust Assurance and Risk (STAR) program.”
Security practices Report an error

“Multi-factor authentication (MFA/2FA)”
Pen testing Report an error

“Independent third-party penetration testing and independent audits”
Trust portal Report an error

“View our Trust Portal to access our security reports, certifications and attestations.”
Dev security Report an error

“Grafana Labs development includes continuous integration, detailed change management policies, static code analysis and vulnerability analysis.”
Vuln assessments Report an error

“Regular infrastructure vulnerability assessments”
Dlp Report an error

“Best practices for internal Data Loss Protection (DLP)”
User lcm training Report an error

“Life Cycle Management of Users (LCM) which include Security Training”