Trust Center
Welcome to Vercel's Trust Center. Here you can find information about our security and compliance program and request access to security documentation.
Vercel’s platform provides the tools and self-driving infrastructure to build, scale, and secure intelligent applications. As the most popular DX platform for frontend development and the team behind v0, Next.js, and AI SDK, we help customers like OpenAI, PayPal, Ramp, and Supreme build for the AI-native web – and ship at the speed of ideas.
To experience the future of AI application development, visit vercel.com.
OpenAI
Under Armour
HashiCorp
Adobe
The Washington Post
Okta
Subprocessors
Trust Center Updates
ISO 27001 Certification
Vercel completed its recertification audit for ISO 27001:2022. Our updated ISO 27001 certificate is now available.
Vercel completed its second surveillance audit for ISO 27001:2022. Our updated ISO 27001 certificate is now available.
Vercel is pleased to announce that we recently migrated to the ISO 27001:2022 framework! Our updated ISO 27001 certificate is available for download.
Vercel is pleased to announce that we recently completed our ISO 27001:2013 certification! Our ISO 27001 certificate is available for download. For more information, see our blog post at https://vercel.com/blog/vercel-iso-27001-security.
We also updated our Policies and 2023 SOC 2 Type 2 Report for download.
SOC 2 Type 2 Report
Vercel's 2026 SOC 2 Type 2 report is now available for download. This audit was completed by Schellman and covers our audit period July 1, 2025 to June 30, 2026.
Our updated policies and pen tests are also available for download.
Vercel's 2025 SOC 2 Type 2 report is now available for download. This audit was completed by Schellman and covers our audit period July 1, 2024 to June 30, 2025.
Our updated security and compliance policies are also available.
Vercel's 2024 SOC 2 Type 2 report is now available for download. This audit was completed by Schellman and covers our audit period July 1, 2023 to June 30, 2024.
We also added our updated policies.
Vercel's SOC 2 Type 2 report is now available for download. This audit was completed by Schellman and Company LLC and covers our audit period July 1, 2022 to June 30, 2023.
HIPAA Compliance
We completed our annual audit to support compliance with the the HIPAA Security Rule and HITECH Breach Notification Requirements as a Business Associate. Our HIPAA report is available for download.
We completed our annual audit to support compliance with the the HIPAA Security Rule and HITECH Breach Notification Requirements as a Business Associate. Our HIPAA report is available for download.
We’re pleased to announce that we recently completed an independent third-party report to ensure that we support compliance with the HIPAA Security Rule and HITECH Breach Notification Requirements as a Business Associate. Our HIPAA report is available for download. For more information, see our blog post at https://vercel.com/blog/vercel-supports-hipaa-compliance.
Subprocessor Update
We have updated our subprocessor list, as it pertains to services utilized for our AI products.
Additional Subprocessors
The following subprocessors are being engaged to support our Vercel products and have been added to the subprocessor list:
- SpaceXAI LLC (fka xAI) to provide Generative AI services
Updated Descriptions for Existing Subprocessors
The following subprocessors are already in use, and have updated descriptions to reflect their role in supporting both the Vercel platform and products:
- Baseten Labs Inc to provide Generative AI services and AI model inference services
- Cerebras Systems Inc to provide Generative AI services and AI model inference services
- Fireworks AI to provide Generative AI services and AI model inference services
- Groq LLC to provide Generative AI services and AI model inference services
To review our complete subprocessor list, visit our Trust Center. If you have any questions or require further information, please do not hesitate to contact us at privacy@vercel.com.
We have updated our subprocessor list, as it pertains to services utilized for our AI products.
Additional Subprocessors
The following subprocessors are being engaged to support our v0 product and have been added to the subprocessor list:
- Cerebras Systems Inc. to provide model inference services.
- Baseten Labs Inc. to provide model inference services.
- Invisible Tools Inc. (dba Raindrop.ai) to provide AI monitoring and analytics services.
To review our complete subprocessor list, visit our Trust Center. If you have any questions or require further information, please do not hesitate to contact us at privacy@vercel.com.
We have updated our subprocessor list, as it pertains to services utilized for our AI products.
Additional Subprocessor
The following subprocessor is currently engaged to support our v0 product and has been added to the subprocessor list:
- Groq, Inc. to provide AI services.
To review our complete subprocessor list, visit our Trust Center. If you have any questions or require further information, please do not hesitate to contact us at privacy@vercel.com.
Vercel April 2026 Security Incident
We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems. We are actively investigating and have engaged incident response experts to help investigate and remediate. We have notified law enforcement. At this time, we have identified a subset of customers that were impacted and are engaging with them directly. Information about the incident, including any steps customers should take can be found at our Security Bulletin.