About

Security and Data Privacy is embedded in every part of Rubrik's business, and we endeavor to provide visibility into Rubrik's security, privacy, system availability, and overall reliability. Please note that you now have authenticated access to our Trust Page. Kindly scroll down to find the below documents on this page:

Security Certifications
Pubsec Certifications and Attestations
Self Assessments
Summarized Penetration Test Results
Information Security Policies
Whitepapers and Process Documents
Cyber Liability Insurance

Kindly note that documentation such as summarized penetration test results are not downloadable by design due to the sensitive nature of information contained in them. If multiple people require access to these documents, please consider raising separate request for each of them. Thank you.

Company Profile

Rubrik, Inc. provides data security solutions to individuals and businesses worldwide. The company offers enterprise data protection, unstructured data protection, cloud data protection, and SaaS data protection solutions; data threat analytics; data security posture; and cyber recovery solutions. It serves financial, retail, trade, transportation, energy, industrial, healthcare and life science, education, technology, media, communications, and public sectors.

Information Security Organization

Under the leadership of the CISO, Rubrik maintains a dedicated, globally distributed security team that focuses on product and enterprise security capabilities such as secure product development and testing, cloud security, endpoint, user and communications security, vulnerability management, incident management, security culture and training, secure logging and monitoring, security governance, security risk management, supplier risk management, and identity and access management.

Point of Contact

To the extent you are not able to find any particular regulatory certification you are looking for on this page, kindly route your query through your Rubrik account rep.

Vulnerability Reporting

Rubrik recommends that security researchers share the details of any suspected vulnerabilities across any asset owned, controlled, or operated by Rubrik, Inc. (or that would reasonably impact the security of Rubrik, Inc. and our users) using the web form below. The Rubrik, Inc. Security team will acknowledge receipt of each vulnerability report, conduct a thorough investigation, and then take appropriate action for resolution. You can find Rubrik's Vulnerability Disclosure Policy here:

https://www.rubrik.com/legal/responsible-disclosure-policy

Availability

RSC currently has multiple regional deployments on GCP in North America, Europe and Asia. Rubrik’s publicly accessible RSC Availability Portal (https://status.rubrik.com) provides visibility into the operational status of the RSC service within each region. Customers can subscribe on the page to be notified of updates, including announcements related to scheduled maintenance.

Resources