Torq Trust Center
At Torq, we understand the challenges facing front-line security teams, who are often overwhelmed as the number of security events continues to rise within increasingly complex environments.
Our platform helps front-line teams and CISOs by delivering lightweight, modern security automation that is easily integrated with their existing tools set, and flexible enough to seamlessly scale as organizations’ needs change.
Welcome to Torq's Security Trust Center.
Built with a security mindset from the foundation up, Torq platform and its operations comply with the industry-leading standards. Our operations are monitored continuously to ensure that all controls are enforced at all times.
Use this portal to learn about our security posture and request full access to our security documentation.
Email us at security@torq.io if you have any additional questions not answered by this Portal.
Inditex
ICL Group
Orca Security
Hard Rock Cafe
Deepwatch
Carvana
Wiz
Telefónica
Agoda
Abnormal Security
Check Point Software
Blackstone
HashiCorp
Riskified
Fiverr
Chipotle Mexican Grill
LEGO®
Macy's
- P&G
Prudential
Scotts Lawn
Siemens
T-Mobile USVirgin Atlantic
Valvoline Global Operations
Residence Inn by Marriott
- Please elaborate on your Physical Access Policies/Procedures?
- Does your product support MFA
- Where is the physical location of Torq's cloud? (Which country/state/availability region are you running in?)
- What types of data does Socrates store and process?
- What are the security measures implemented in HyperAgents to protect against threats, such as, but not limited to prompt injection.
Torq Trust Center Updates
eMudhra CA Keys Compromised
Torq's public endpoints (torq.io, app.torq.io, api.torq.io) do not use certificates issued by eMudhra/emSign.
They chain to Google Trust Services and Let's Encrypt, neither of which is affected.
PHP core vulnerabilities
Torq isn't affected nor utilizing any php versions associated with the latest findings in the wild.
ISO 42001 Certification Renewed
On October 25, 2026, we successfully completed our annual surveillance audit, reinforcing our ongoing commitment to responsible, secure, and AI management.
LiteLLM 1.107.0 supply chain compromise
Torq isn't affected nor utilizing any LiteLLM versions associated with the latest findings in the wild.
Torq internal response to XZ Utils (CVE-2024-3094) Vulnerability
Torq conducted a thorough investigation of the recently identified vulnerability CVE-2024-3094 and we found no indication of exposure or risk.
Torq utilizes open-source, IaC, Container AppRisk, SAST and SCA tooling as part of our standard practices to detect vulnerabilities within its SDLC.