Notice on PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Syndio Logo

Trust Center

Start your security review
View & download sensitive information
ControlK

Welcome to Syndio’s Trust Center!

At Syndio, protecting customer data is foundational to everything we do. Our security, privacy, and compliance programs are designed to align with leading industry standards and frameworks, ensuring the confidentiality, integrity, and availability of our services and the data entrusted to us.

This Trust Center provides transparency into our security practices, governance approach, and compliance posture. You’ll find details on our policies, controls, and independent certifications that demonstrate our ongoing commitment to safeguarding your information as we continue to innovate.

  • Microsoft
  • Nokia
  • American Airlines
  • Salesforce
  • General Mills
  • Nordstrom
  • Siemens
  • ConocoPhillips
  • Outokumpu
  • BMC Software
  • Elevance Health
  • Ford Motor Company
  • United Rentals
  • Bayer
  • Assurant
  • Campari

Documents

Featured Documents

COMPLIANCESOC 2 Type 2

Trust Center Updates

Notice on PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

Vulnerabilities

On October 20–21, 2026, two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed in PHP, a widely used web programming language. Syndio’s platform is not built on PHP and is not affected. Our only PHP-based system is our public marketing website, which our hosting provider has already updated to a patched version (PHP 8.2.35). A review of our code repositories and infrastructure inventory found no other exposure. As a result, no risks or impact to our systems have been identified. Our Security team will continue to monitor the situation closely and provide updates should anything change.

ISO 27001 Recertification Complete

Compliance

Syndio Solutions, Inc. is excited to share that we have officially earned ISO/IEC 27001:2022 recertification. ISO 27001, established by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), outlines the framework for managing, maintaining, and reviewing a comprehensive Information Security Management System (ISMS). Following an independent certification audit by Sensiba LLP (Sensiba), our ISMS was validated as fully compliant with the ISO 27001 standard. Reaching this milestone reflects our continuous dedication to data security on behalf of our customers and stakeholders.

A copy of the new ISO 27001 Certificate is readily available via the link below.

Knowledge Base (FAQ)
  • Where do the answers come from in Syndi?
  • What bias testing have you done, and how often do you audit the recommendations?
  • Where is customer data processed?
  • How does Syndio ensure its AI is fair, secure, and compliant with regulations?
  • What does human in the loop mean in Syndi?
View more
Built onSafeBase by Drata Logo