AI governance, independently verified.

dotCMS is certified to ISO/IEC 42001:2023, the international standard for AI management systems. The certification covers the governance and risk management practices applied to customer-facing dotAI capabilities and internal AI use.

In dotCMS, an AI agent is another actor in the system: it works inside the same roles, permissions, and workflows as a person, and every change it makes stays traceable and reversible through version history.

Security requirements for Texas public-sector organizations.

dotCMS is certified at TX-RAMP Level II, demonstrating that dotCMS Cloud meets the security requirements established for cloud service providers working with Texas state agencies and other eligible public-sector organizations.

Security controls tested over time.

dotCMS has completed a SOC 2 Type II examination. An independent CPA firm assessed dotCMS controls against the AICPA Trust Services Criteria for security, availability, and confidentiality and tested their operating effectiveness over time.

The full report and auditor test results are available through the dotCMS Trust Center.

Information security managed to an international standard.

dotCMS is ISO/IEC 27001:2022 certified, demonstrating that its information security management system follows internationally recognized requirements for managing security risks and protecting information across its cloud services and supporting operations.

Cloud security controls, documented and accessible.

dotCMS maintains a completed Consensus Assessments Initiative Questionnaire (CAIQ) from the Cloud Security Alliance, providing customers and auditors with detailed information about its cloud security practices and controls.