Bitrise maintains SOC 2 Type II compliance with a successful 2026 assessment

At Bitrise, we continually invest in security best practices to ensure that our customers' data stays safe and secure. As part of this ongoing effort, we are pleased to announce that we have successfully completed our 2026 SOC 2 Type II assessment, with no exceptions recorded in the final report. The report covers the period from July 1, 2025 to June 30, 2026 and is valid until June 30, 2027.

This is the sixth consecutive year Bitrise has completed a SOC 2 Type II assessment since obtaining our first report in 2021. The examination was conducted by A-LIGN, a technology-enabled security and compliance firm trusted by more than 6,400 clients worldwide to help mitigate cybersecurity risks.

In late 2025, we also achieved PCI DSS compliance to further strengthen customer data security.

Why security matters so much for a mobile DevOps platform

A mobile DevOps platform handles a lot of sensitive material. To build, test and ship your apps, Bitrise needs access to your source code, signing certificates and provisioning profiles, API keys, third-party credentials and app store accounts. If any of that were compromised, your release pipeline would be too. We audit our controls externally every year because we would expect the same from any vendor in this position.

In recent years, the Bitrise platform has grown to cover the full path from commit to store, which also meant further extending the area of assessment, to cover all our products:

• Bitrise CI for building and testing your apps
• Build Hub for teams running their pipelines on GitHub Actions, whether mobile or not
• Build Cache for cutting redundant compilation on any CI
• Release Management for approvals and store distribution
• CodePush for React Native over-the-air updates

Requesting the report

The latest SOC 2 report is available through our Trust Center, along with other security and compliance documentation. The report is shared under NDA: our security team reviews each request, and once approved, you get access to the full report.

To learn more about our security policies and initiatives, please contact our Security Team at [email protected].