About GitHub's compliance reports
You can access GitHub's compliance reports in your enterprise settings.
- SOC 1, Type 2
- SOC 2, Type 2
- Cloud Security Alliance CAIQ self-assessment (CSA CAIQ - Level 1)
- ISO/IEC 27001:2022 certification
- Cloud Security Alliance STAR certification (CSA STAR - Level 2)
- GitHub Bug Bounty Quarterly reports
- GitHub.com Services Continuity and Incident Management Plan
- GitHub PCI DSS Attestation of Compliance
Accessing compliance reports for your enterprise
-
In the top-right corner of GitHub, click your profile picture.
-
Depending on your environment, click Enterprise, or click Enterprises then click the enterprise you want to view.
-
At the top of the page, click Compliance.
-
Under "Resources", to the right of the report you want to access, click Download or View.
