DISCO Trust Center
Welcome to DISCO's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
Policies
We do not externally share policy documentation. Please reference our SOC 2 Type 2 report for more detail surrounding the policies and procedures that we have in place.
DISCO Trust Center Updates
DISCO PHP2Shell Statement
DISCO is aware of the recently disclosed critical vulnerabilities in PHP known as “PHP2Shell”, tracked as CVE-2026-109618 and CVE-2026-109619.
DISCO’s Security team has assessed our exposure in DISCO products, services, and supporting infrastructure. There is no impact to DISCO products or services from the disclosed PHP2Shell vulnerabilities.
We continue to monitor this issue closely, including our third-party vendors.
We will provide updates here if our assessment changes. Questions can be sent to security@csdisco.com or your DISCO account team.