Disaster Recovery & Operational Resilience
Cabnit Logo

Trust Center

Start your security review
View & download sensitive information
Ask for information
ControlK

Who We Are

Cabnit provides a complete, large-scale solution for content applications and compliance. We host, operate, and administer the Content Cloud from Systemware to deliver robust content management services to our customers. Our platform supports the secure capture of customer content, automatic indexing to create metadata for organization and security, encrypted and compressed storage, retrieval and transformation via API or user interface, and comprehensive retention management.

Our Trust Posture & Security Practices

At Cabnit, safeguarding your information is central to how we operate. Our comprehensive trust program is built upon rigorous operational practices, strict data protection policies, and independent third-party validation:

  • Independent Certifications: To demonstrate the suitability of our design and the operating effectiveness of our internal controls, Cabnit undergoes independent examinations and audits. Our systems and controls are evaluated against the AICPA Trust Services Criteria (SOC 2 Type II), and Cabnit is also certified to ISO/IEC 27001:2022 and compliant with PCI DSS v4.0.1.

  • Data Protection & Classification: We maintain a strict Data Classification Policy to ensure all information owned, managed, controlled, or maintained by Cabnit is properly labeled and handled. We define clear roles and responsibilities—including Data Owners who classify information and approve access, and Data Custodians who implement security controls such as encryption and access restrictions—to ensure data is protected throughout its lifecycle.

  • Secure Infrastructure: Our administration systems are managed within a secure cloud-computing environment. Authorized employees manage these systems via secure remote connections, supported by corporate antivirus software, local firewalls, and continuous environmental monitoring.

This Trust Center serves as a central resource to help you understand the safeguards we have in place to protect your data and maintain your trust. We invite you to explore the rest of this portal for detailed documentation on our specific security controls, policies, and reports.

Trust Center Updates

Disaster Recovery & Operational Resilience

General

Semi-annual DR/resilience testing across cloud environments, results documented and reviewed as part of the business continuity program.

Security & Compliance Program Maturity

General

2025: Expanded to NIST AI RMF, NIS2, and DORA.
2026: enabling ISO/IEC 27701 (Privacy) and ISO/IEC 42001 (AI Management) within Drata.

PCI DSS v4.0.1 Assessment Completed

Compliance

Cabnit successfully completed its PCI DSS v4.0.1 assessment on March 27, 2026, for systems that process or store cardholder data. Cabnit continues to maintain PCI DSS v4.0.1 compliance as part of its ongoing security and compliance program.

ISO/IEC 27001:2022 Certification Achieved

Compliance

Final audit report dated April 22, 2026. Cabnit continues to operate an ISMS aligned with the updated standard, supported by ongoing internal reviews and continuous control enhancements.

"SOC 2 Type II Report Renewed

Compliance

Covers Security, Availability, Processing Integrity, Confidentiality, and Privacy trust principles for the period March 1, 2025 – February 28, 2026. Final report issued June 23, 2026.

Subprocessors

Documents

COMPLIANCEISO/IEC 27001:2022
Knowledge Base (FAQ)
  • Do you support SSO/identity federation?
  • How do you encrypt data at rest and in transit?
  • What additional regulatory frameworks do you align with?
  • How is sensitive data (PII, PHI, cardholder data) classified and handled?
  • How do you manage vulnerabilities and patching?
View more
Built onSafeBase by Drata Logo

www.cabnit.com · infosec@cabnit.com · © 2026 Cabnit, Inc. All rights reserved.