Unity's Commitment to Security

Symptoms:

• As a company planning to use Unity's subscription service, we first want to confirm Unity's security measures.
• Does Unity have a SOC 2?
• Is Unity ISO 27001 certified?
• I want detailed information about cloud security and to verify the vulnerability management for servers operated by Unity.

Resolution:

See below for commonly asked questions and resources:

Does Unity have a SOC 2?

We don't have a SOC 2 at this time. We are working on one for the cloud-specific products. This will not cover the Editor.

Is Unity ISO 27001 certified?

While Unity is PCI compliant, we are not ISO 27001 certified and have no immediate plans to become certified. 

Does Unity store logs?

Logs are stored for audit and operational purposes in line with personal data protection regulations and Unity Terms of Service.

Responsibility and Roles in case of an incident:
Please refer to Section 15 of the Developer Privacy Policy.

Can deleted data be recovered without permission by a third party?:
Please refer to Section 4 of the Developer Privacy Policy.

For anything more specific to your use case, compile your security-related questions in an email to  security@unity3d.com. Please bear in mind that you may be required to sign a mutual NDA and responses can take 15 to 30 business days.