Trust Center
Evidence, by status
Certificate scope, public evidence, and enterprise review materials are grouped by access.
Available now
Evidence you can inspect now
ISO/IEC 27001:2022 certified ISMS
PATEON Network Technology Incorporated holds ISO/IEC 27001:2022 certificate QCC/B86F/1224 for the registered scope below.
Registered scope: Specializing in information software services, data processing, third-party payment, software wholesale and retail, computer equipment installation and manufacturing, advertising services, management and leasing consulting, and other legally permitted activities, as per the Statement of Applicability Version 1.1 dated 9th August 2024.
Verify the certificate ↗ (opens in a new tab)Apache-2.0 auditable core
NextPDF Core is open source under the Apache License 2.0. Its package metadata, source, tests, and in-process code share that licence boundary.
Review the package and licence ↗ (opens in a new tab)Verifiable standards samples
Published standards targets link to downloadable engine output, validator commands, generating source, and SHA-256 provenance. The validator supplies the file-level result.
Review standards evidence →Privacy, DPA, and sub-processors
The legal hub publishes the Privacy Policy, Data Processing Agreement for hosted services, and current sub-processor list.
Review legal policies →Coordinated vulnerability disclosure
Send security reports to security@getnextpdf.com for triage and coordinated disclosure.
Under NDA
Shared with enterprise evaluators during procurement
Penetration-test summary
A summary of independent security testing and remediation status, available to enterprise evaluators under NDA.
Request under NDA →Security architecture review
Enterprise evaluators can review the threat model, fail-closed design notes, and asset-handling controls under NDA.
Request under NDA →
Review the evidence
Inspect the available artifacts, or request under-NDA material for an enterprise evaluation.