terms conditions
Cloudsmith
Cloudsmith is a fully managed solution for controlling, securing, and distributing everything that flows through your software supply chain, using the best of cloud-native artifact management.
Resources
Bulk download Opens in new tab
Current ISO27001 Policies
| #### Acceptable Usage Policy Copy link for Acceptable Usage Policy Request access Acceptable Usage Policy |
| #### Access Control Policy Copy link for Access Control Policy Request access Access Control Policy |
| #### Anti-Virus and Malware Policy Copy link for Anti-Virus and Malware Policy Request access Anti-Virus and Malware Policy |
| #### Anti-Bribery Policy Copy link for Anti-Bribery Policy Request access Anti-Bribery Policy |
| #### Backup Policy Copy link for Backup Policy Request access Backup Policy |
| #### Bring Your Own Device (BYOD) Policy Copy link for Bring Your Own Device (BYOD) Policy Request access Bring Your Own Device (BYOD) Policy |
| #### Business Continuity Plan Copy link for Business Continuity Plan Request access Business Continuity Plan |
| #### Communications Policy Copy link for Communications Policy Request access Communications Policy |
| #### Disposal Destruction Policy Copy link for Disposal Destruction Policy Request access Disposal Destruction Policy |
| #### HR Security Policy Copy link for HR Security Policy Request access HR Security Policy |
| #### Incident Management Procedure Copy link for Incident Management Procedure Request access Incident Management Procedure |
| #### Information Classification Policy Copy link for Information Classification Policy Request access Information Classification Policy |
| #### Information Security Encryption Policy Copy link for Information Security Encryption Policy Request access Information Security Encryption Policy |
| #### Information Security Policy Copy link for Information Security Policy Request access Information Security Policy |
| #### Information Transfer Policy Copy link for Information Transfer Policy Request access Information Transfer Policy |
| #### ISMS Scope Copy link for ISMS Scope Request access ISMS Scope |
| #### IT Asset Management Copy link for IT Asset Management Request access IT Asset Management |
| #### List of Legal Contractual Regulatory Requirements Copy link for List of Legal Contractual Regulatory Requirements Request access List of Legal Contractual Regulatory Requirements |
| #### Change Management Policy Copy link for Change Management Policy Request access Change Management Policy |
| #### Mobile Device and Teleworking Policy Copy link for Mobile Device and Teleworking Policy Request access Mobile Device and Teleworking Policy |
| #### Network Management Policy Copy link for Network Management Policy Request access Network Management Policy |
| #### Onboarding Offboarding Policy Copy link for Onboarding Offboarding Policy Request access Onboarding Offboarding Policy |
| #### Physical and Environmental Security Policy Copy link for Physical and Environmental Security Policy Request access Physical and Environmental Security Policy |
| #### Policy on the use of Cryptographic Controls Copy link for Policy on the use of Cryptographic Controls Request access Policy on the use of Cryptographic Controls |
| #### Removable Devices Policy Copy link for Removable Devices Policy Request access Removable Devices Policy |
| #### Risk Assessment and Risk Treatment Methodology Copy link for Risk Assessment and Risk Treatment Methodology Request access Risk Assessment and Risk Treatment Methodology |
| #### Secure Development Policy Copy link for Secure Development Policy Request access Secure Development Policy |
| #### Social Media Policy Copy link for Social Media Policy Request access Social Media Policy |
| #### Supplier Security Policy Copy link for Supplier Security Policy Request access Supplier Security Policy |
| #### Threat and Vulnerability Management Policy Copy link for Threat and Vulnerability Management Policy Request access Threat and Vulnerability Management Policy |
| #### Training and Awareness Plan Copy link for Training and Awareness Plan Request access Training and Awareness Plan |
| #### ISO 27001:2022 Certificate Cloudsmith Copy link for ISO 27001:2022 Certificate Cloudsmith Request access ISO 27001:2022 Certificate Cloudsmith |
| #### Operations Security Policy Copy link for Operations Security Policy Request access Operations Security Policy |
| #### Statement of Applicability Copy link for Statement of Applicability Request access Statement of Applicability |
Penetration Test Resources
| #### February 2025 - Executive Penetration Test Report Copy link for February 2025 - Executive Penetration Test Report Request access February 2025 - Executive Penetration Test Report |
| #### Penetration Test Remedation Commentary - February 2025 Copy link for Penetration Test Remedation Commentary - February 2025 Request access Penetration Test Remedation Commentary - February 2025 |
| #### Cloudsmith Penetration Test Report March 2026.pdf Copy link for Cloudsmith Penetration Test Report March 2026.pdf Request access Cloudsmith Penetration Test Report March 2026.pdf |
Internal Company Policies
| #### Anti-Bribery Policy Copy link for Anti-Bribery Policy Request access Anti-Bribery Policy |
| #### Business Expenses & Travel Policy Copy link for Business Expenses & Travel Policy Request access Business Expenses & Travel Policy |
| #### COI - Evidence of Insurance June 2026.pdf Copy link for COI - Evidence of Insurance June 2026.pdf Request access COI - Evidence of Insurance June 2026.pdf |
| #### DPA.pdf Copy link for DPA.pdf Request access DPA.pdf |
| #### Charitable Contributions & Donations Policy Copy link for Charitable Contributions & Donations Policy Request access Charitable Contributions & Donations Policy |
| #### Cloudsmith Staff Privacy Policy Copy link for Cloudsmith Staff Privacy Policy Request access Cloudsmith Staff Privacy Policy |
| #### Disciplinary & Grievance Procedures Copy link for Disciplinary & Grievance Procedures Request access Disciplinary & Grievance Procedures |
| #### Family Friendly Policies Copy link for Family Friendly Policies Request access Family Friendly Policies |
| #### Modern Slavery and Human Trafficking Statement Copy link for Modern Slavery and Human Trafficking Statement Modern Slavery and Human Trafficking Statement View Modern Slavery and Human Trafficking Statement |
| #### Remote First Working Policy Copy link for Remote First Working Policy Request access Remote First Working Policy |
| #### Valuing Diversity Copy link for Valuing Diversity Request access Valuing Diversity |
| #### NDA Clause - Employment Contract Copy link for NDA Clause - Employment Contract Request access NDA Clause - Employment Contract |
| #### Cloudsmith Company Handbook Copy link for Cloudsmith Company Handbook Request access Cloudsmith Company Handbook |
| #### Product Architecture Diagram Copy link for Product Architecture Diagram Request access Product Architecture Diagram |
Insurance and Finance Policies
| #### Cloudsmith standardised information letterhead Copy link for Cloudsmith standardised information letterhead Request access Cloudsmith standardised information letterhead |
Public Cloudsmith Policies
| #### Bug Bounty Programme Copy link for Bug Bounty Programme View Bug Bounty Programme |
| #### Cloudsmith Individual Privacy Policy Copy link for Cloudsmith Individual Privacy Policy View Cloudsmith Individual Privacy Policy |
| #### Cloudsmith MSA 2026 Copy link for Cloudsmith MSA 2026 View Cloudsmith MSA 2026 |
Business Continuity, Information Technology & Disaster Recovery Resources
| #### Business Continuity and Disaster Recovery Plan Copy link for Business Continuity and Disaster Recovery Plan Request access Business Continuity and Disaster Recovery Plan |
| #### Business Continuity Test Document June 2025 Copy link for Business Continuity Test Document June 2025 Request access Business Continuity Test Document June 2025 |
SOC2 Type 1 Resources
| #### Cloudsmith SOC2 Type 1 Report Copy link for Cloudsmith SOC2 Type 1 Report Request access Cloudsmith SOC2 Type 1 Report |
| #### Cloudsmith SOC2 Type 1 Attestation Copy link for Cloudsmith SOC2 Type 1 Attestation Request access Cloudsmith SOC2 Type 1 Attestation |
SOC2 Type 2 Resources
| #### Cloudsmith SOC 3 Report Copy link for Cloudsmith SOC 3 Report Request access Cloudsmith SOC 3 Report |
| #### Cloudsmith - Attestation Status Confirmation Letter SOC 2 Type 2 Copy link for Cloudsmith - Attestation Status Confirmation Letter SOC 2 Type 2 Request access Cloudsmith - Attestation Status Confirmation Letter SOC 2 Type 2 |
Other resources
| #### EU Designated EDPO Copy link for EU Designated EDPO Request access EU Designated EDPO |
Bulk download will only work on resources that are accessible and not view only.