Welcome to Directus's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
We protect our corporate network against external & internal threats.
We implement internal measures and practices to maintain a high standard of security.
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
What data protection mechanisms does Directus provide?
Can I choose which Cloud Provider region my data is stored in?
What compliance certifications does Directus have?
How does Directus handle data at rest and in transit?
Does Directus transfer my data outside my selected region?
View more
General
Changes made to our Privacy Policy effective June 9, 2026:
- Revised for clarity
- Explained our legal basis for processing
You may review the updated Privacy Policy here
Subprocessors
Addition of Northflank
We have updated our list of third-party subprocessors. Effective February 1, 2026, we have engaged Northflank to provide [e.g., cloud infrastructure, application hosting, and deployment services]. This addition supports our commitment to maintaining a scalable and secure infrastructure.
You can view our full list of subprocessors and their associated data processing locations here: Trust Center
- In the Legal Card-->Subprocessors
General
Our Trust Center has moved to a new home under our main domain:
- 👉 New Link: trust.directus.com (formerly trust.directus.io)
- Automatic redirects are in place, but please update your bookmarks to maintain quick access to our compliance reports, security policies, and system updates.
If you need help using this Trust Center, please contact us.
Contact support
If you think you may have discovered a vulnerability, please send us a note.
Report issue