Bentley Trust Center: Compliance

Bentley’s cloud offerings are designed with operational best practices and robust controls to deliver compliance that you can rely on. Bentley partners with leading cloud providers so that you can benefit from data centers and network architecture built to satisfy the most stringent industry standards and country-specific requirements. The following compliance standards and information attests to the security and dependability of Bentley’s named cloud services offerings.



Bentley Managed Services
ProjectWise 
ConstructSim Work Package Server
AssetWise (eB Insight V8i)

The systems and processes that support Bentley Managed Services are ISO/IEC 27001:2013 certified. ISO/IEC 27001:2013 is one of the most widely recognized information security standards. Compliance with ISO/IEC 27001:2013 is certified by A-LIGN, an ANAB accredited certification body. The Bentley Managed Services ISO/IEC 27001:2013 certificate can be viewed here and the current ISO/IEC 27001:2013 Statement of Applicability can be viewed here

Bentley Managed Services
Bentley CONNECT Cloud Services

Bentley Managed Services is a Cloud Security Alliance (CSA) Security, Trust & Assurance Registry (STAR) registrant. Bentley has completed the Consensus Assessments Initiative Questionnaire (CAIQ) providing answers to nearly 300 questions a cloud user or a cloud security auditor may wish to ask of a cloud provider. The CSA STAR is a publicly accessible registry that documents the security controls provided by various cloud computing offerings. It helps users assess the security of cloud providers they currently use or are considering contracting with. You can view Bentley’s CAIQ for Managed Services here, and for CONNECT Cloud Services here.

Bentley Managed Services
ProjectWise
BIM Strategic Consulting

Government Cloud (G-Cloud) is a UK government initiative to promote government-wide adoption of cloud computing. The G-Cloud framework is an agreement between the government and suppliers who provide cloud-based services.  The Crown Commercial Service (an agency that works to improve commercial and procurement activity by the government) awarded Bentley Systems International Limited G-Cloud 7 status for Bentley ProjectWise found here and for BIM Strategic Consulting found here.

Bentley CONNECT Cloud Services

Bentley CONNECT Cloud Services is designed to keep user data secure with enterprise grade security, which is demonstrated with the granting of a SOC2 Type I and a Type II report by a certified AICPA auditing body. Bentley CONNECT Cloud Services are audited annually against the SOC reporting framework by qualified independent computer-security auditors. The scope of audit for Bentley CONNECT Cloud Services covers controls applicable to in-scope trust principles for each service. In general, the availability of these reports is restricted to customers who have signed non-disclosure agreements with Bentley.

Report a security concern

Bentley’s security team investigates all reports of security vulnerabilities affecting Bentley products and services. If you have a security concern or are a security researcher and believe you have found a security vulnerability involving Bentley products and services, please contact us so that we can protect the integrity of our products and services.