Trust Center

Updates

Changes to our security posture, newest first. A key change is always explained here.

  1. In place

    Independent auditor signed

    Signed for SOC 2 Type 1, SOC 2 Type 2 and ISO 27001. No report held yet. Type 1 target December 2026. Details

  2. In progress

    Third-party penetration test under way

    An external firm is testing Bolt in October 2026. A public summary will be published here, and the full report shared on request, once it is delivered. Details

  3. In place

    Release signing key rotated

    Precautionary; no compromise of the previous key is known. v0.1.165 is the first release signed by the new key. Details

  4. In progress

    Penetration test booked

    Engagement booked with an external firm. Details

  5. In place

    Google CASA assessment published

    Passed by an authorized lab. Restricted Gmail access granted on the Letter of Validation. Details