Trust Center
Xerox’s Security Compliance Program has been developed with the goal of building customer trust. It considers our customer’s needs and expectations to comply with applicable laws, regulations and standards across the various geographies and industries of our customers and provides necessary independent assurance on the security posture of Xerox products and services.
Trust Center Updates
Statement on latest PHP Critical Vulnerabilities
Xerox is aware of the recently disclosed PHP vulnerabilities and are assessing potential impact. We will take appropriate action based on that assessment. Customers should monitor our product-specific security bulletins and apply Xerox security updates as they are released. The security of our systems and the products we support remains a priority.
The latest status can be found by clicking on all security bulletins.
New SOC 2 Reports Available
New Updated SOC 2 Reports are available for the following services:
1] SOC 2 Report -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery
Updated SOC 2 Bridge letters are available for the following services for Quarter 2 2026:
1] SOC 2 Q2 2026 Bridge Letter -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery, XMPie
Updated SOC 2 Bridge letters are available for the following services for Quarter 1 2026:
1] SOC 2 Q1 2026 Bridge Letter -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery
Updated SOC 2 Report is available for
Updated SOC 2 Bridge letters are available for the following services for Quarter 4 2025:
1] SOC 2 Q4 2025 Bridge Letter -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery, CareAR, Xerox DocuShare, XMPie
Updated SOC 2 Report is available for
Updated SOC 2 Report are available for the following services:
1] SOC 2 Report -: CareAR, Xerox DocuShare
Updated SOC 2 Report are available for the following services:
1] SOC 2 Report -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery
Updated SOC 2 Bridge letters are available for the following services for Quarter 1 2025:
1] SOC 2 Q1 2025 Bridge Letter -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery
Updated SOC 2 Bridge letters are available for the following services for Quarter 4 2024:
1] SOC 2 Q4 2024 Bridge Letter -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery, CareAR, Xerox Docushare, XMPie, Xerox IT Managed Services (Xerox US).
Completion of the SOC 2 Type 2 audit demonstrates Xerox’s continued commitment to the security of our product and that of our overall security posture.
SOC 2 Type 2 Report for the 2024 time period available are for:
1] SOC 2 Q3 2024 Bridge Letter -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery, Xerox IT Managed Services (Xerox US), CareAR, Xerox Docushare, XMPie.
Completion of the SOC 2 Type 2 audit demonstrates Xerox’s continued commitment to the security of our product and that of our overall security posture.
SOC 2 Type 2 Report for the 2024 time period available are for:
1] SOC 2 Report -: CareAR, XMPie
2] SOC 2 Q2 2024 Bridge Letter -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery, Xerox DocuShare
Updated SOC 3 Reports Available
Updated SOC 3 Report are available for the following services:
1] SOC 3 Report -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery
Updated SOC 3 Report are available for the following services:
1] SOC 3 Report -: Managed Print Services, Xerox Workplace Cloud, Xerox App Gallery
Xerox DORA & NIS 2 Compliance
Please find the latest DORA & NIS2 compliance statement for Xerox here
Regards,
Xerox Cybersecurity
New Cyber Essentials & Cyber Essentials Plus Certification
We’re pleased to announce that Lexmark International Ltd. has successfully achieved Cyber Essentials & Cyber Essentials Plus certification for the 2026-2027 period. This certification underscores our commitment to maintaining the standards of cybersecurity, ensuring the protection and integrity of data.
Link:
Regards,
Xerox Cybersecurity
We’re pleased to announce that Xerox UK Ltd. has successfully achieved Cyber Essentials & Cyber Essentials Plus certification for the 2025-2026 period. This certification underscores our commitment to maintaining the standards of cybersecurity, ensuring the protection and integrity of data.
Link:
Regards,
Xerox Cybersecurity
We’re pleased to announce that Xerox UK Ltd. has successfully achieved the Cyber Essentials Plus certification. This certification underscores our commitment to maintaining the standards of cybersecurity, ensuring the protection and integrity of data.
Link:
Regards,
Xerox Cybersecurity