Liferay
Compliance ProgramsControlsDeliverables

Deliverables

We take security, compliance, and privacy seriously. Explore our certifications, reports, and policies in one place.
⌘K

FedRAMP

The evidence packages that demonstrate Liferay has implemented required controls and is maintaining compliance.

Liferay, Inc. Type 2 SOC 2 plus HIPAA and CSA STAR Examination-bridge-letter-(Liferay-signed).pdf

SOC2 Type 2 -- Bridge letter

FRC-CSO-PKG_Liferay_Class_A_2026-10-29

CPO - Human readable

sdr-1.0.0.json

Liferay SaaS - SDR json
Download

FRC-CSO-PKG_Liferay_Class_A_2026-10-29.json

CPO - Machine readable
Download

OCR_Template.docx

OCR Template - Human readable

Liferay-2026-Type 2 SOC 2 + HIPAA + CSA STAR-Final Report.pdf

SOC 2 Report

Liferay Inc. - 2027 - Type 2 SOC 2 plus HIPAA and CSA STAR - CoE.pdf

SOC 2 Bridge Letter - CoE

OCR_Template (1).json

OCR Template - Machine-readable

Final_incident_report_template_fedramp2026 (2).md

Final Incident Report Template - Human-readable

final_filled.json

Final Incident Report Template - Machine-readable

Ongoing_incident_report_template_fedramp2026.md

Ongoing Incident Report - Human readable

ongoing_filled.json

Ongoing Incident Report - Machine readable

Initial_Incident_Report_template_fedramp2026.md

Initial Incident Report - Human readablw

initial_filled.json

Initial Incident Report - Machine readable