Trust Center
At YugabyteDB, security and resilience are built directly into our products / services and operational practices. We recognize that customers rely on us to power mission-critical workloads, and we hold our internal systems, cloud infrastructure, and operational processes to enterprise-grade security standards.
To support our customers' diverse needs, our suite of database solutions is continually expanding. We offer a growing array of highly customizable products and flexible deployment options tailored to fit your specifications.
To secure these offerings and safeguard sensitive data, we maintain a robust security program, aligned to reputable, industry-accepted frameworks, such as ISO 27001 and NIST 800-53. To continuously validate our commitment to trust and compliance, we are audited by independent third parties against a variety of other leading standards.
Please email compliance@yugabyte.com if you have any questions.
Trust Center Updates
Security Advisory: YugabyteDB Products Are Not Affected by CVE-2026-109618 and CVE-2026-109619
CVE-2026-109618 and CVE-2026-109619 affect PHP. YugabyteDB products, including YugabyteDB, YugabyteDB Anywhere, and YugabyteDB Aeon, do not include or use PHP. Customers are therefore not affected by these vulnerabilities, and no action is required.
If you have questions, please contact YugabyteDB Support or security@yugabyte.com.
Salesforce/Drift Incident - No Impact to YugabyteDB
We have confirmed that YugabyteDB is not impacted by the recent security incident involving Salesforce and Drift. Our platform does not utilize the specific Salesloft technology or the associated Drift application.