Citrix SOC 2 Audit Reports

Citrix issues SOC 2 reports on a regular basis. A SOC (System and Organization Control) report is designed to help service organizations, like Citrix, build trust and confidence in the service performed and controls related to the service through a report by an independent assessor.

The SOC 2 report is used to display the controls that a service provider has in place. The report is intended to provide detailed information and assurance about the controls at a service organization relevant to processing users’ data and keeping that data private and confidential. The SOC 2 touches on three (3) overall Trust Principles that a cloud provider can choose to report on. These include:

• Security: protecting against unauthorized access or changes.
• Availability: ensuring it will be up and running as needed.
• Confidentiality: information in the system is properly protected.

The Citrix SOC 2 attestation reports are issued by an outside auditor, whose role is to assess the extent to which we comply with our selected Trust Principles based on the systems and processes in place.

Available reports

Access our SOC 2 audit reports to understand how we ensure the security, availability, and confidentiality of our services. To obtain a report, choose from the options below:

• Citrix Secure Internet Access SOC 2: to request access, please email us.
• 2023 Citrix Cloud-Based Services SOC 2: sign in to download the report^*.

^* Access to Citrix audit reports require a signed online Non-Disclosure Agreement (NDA). Follow these instructions to sign an online NDA or view your previously signed NDA in My Account. If you have an NDA in place but do not see it in your account, please contact your Citrix account representative. Note, after you sign an online NDA, it could take four to six hours for our systems to synchronize.