Our Commitment to Security

Patch My PC Security

At Patch My PC, security isn’t just a checkbox—it’s at the heart of everything we do.

View Trust Center
ISO_27001-Badge_400x400
SOC 2 Compliance Badge
We take a proactive approach to protecting our customers, ensuring data security, compliance, and transparency. Some best practices include:

Data Protection & Privacy – We implement encryption, access controls, and rigorous policies to protect customer data.

Vulnerability Management – Continuous monitoring, rapid response, and proactive patching ensure a secure environment.

Compliance & Certifications – We align with recognized security standards to ensure regulatory compliance.

Secure Development Practices – Security is embedded in every stage of our software development lifecycle.

Compliance Security Illustration

Trusted By…

ISO 27001 Certified Badge

At Patch My PC, we take information security seriously. We’ve achieved the ISO 27001:2022 certification, demonstrating our commitment to the highest international standards for security, reliability, and trust. This certification reflects our ongoing dedication to protecting customer data and continuously strengthening our security posture. Download our ISO certificate from our Trust Center.

View Our ISO 27001:2022 Certification

SOC 2 Compliance Badge

Security and trust are core to how we operate at Patch My PC. Our SOC 2 Type 2 report demonstrates that we have the right systems and controls in place to protect customer data, with a focus on security, availability, and confidentiality. It reflects our ongoing work to strengthen our security posture as we grow. You can access our SOC 2 Type 2 report in the Trust Center.

View Our SOC 2 Type 2 Report

Security Compliance Blogs

Browse our archive of Patch My PC security articles.
View All Security Articles
Security
Security Validation of the Patch My PC Application Catalog
At Patch My PC, we understand that IT Security is vital to your organization, especially when considering a third-party patch management solution. We want to ensure you understand how we validate…
Patch My PC Team
Security
Security Validation for Patch My PC Cloud 
Patch My PC Cloud is a cloud-native solution that is primarily designed for customers using Intune. It automates the packaging, deployment, and updating of third-party applications across devices….
Patch My PC Team
Security
Security Validation of the Patch My PC Publisher
It is important to note that the Publisher is installed on to the top-most WSUS distribution point in the customers environment. How does the Patch My PC application catalog connect to the Patch…
Patch My PC Team

Security, SLAs, Telemetry, and Terms of Service

The Patch My PC Trust Center is the central resource for reviewing our security, privacy, and compliance practices. Use it to support your vendor assessment or find answers to security and data-handling questions.

  • Certifications and compliance: Our ISO 27001:2022 certificate, SOC 2 Type II report, and information about GDPR and the EU-US Data Privacy Framework.
  • Security documentation: Penetration test reports, our incident response plan, and business continuity and disaster recovery documentation.
  • Data and privacy: Product data-flow diagrams, our data collection matrix, and subprocessor information explaining how providers support our services and what data they process.
  • Questionnaires and accessibility: Completed CAIQ, SIGLITE, and HECVAT questionnaires, plus our VPAT accessibility documentation.
  • Security controls and updates: Information about infrastructure and product security, encryption, data retention, and changes to our compliance resources and subprocessors.

Some documents require access approval. Follow the instructions in the Trust Center to request access. For security questions or to report a potential security issue, contact [email protected].

Learn more

Our Terms of Service explain the terms for using Patch My PC software and services. Our Privacy Policy explains how we handle personal information.

Review the current documents using the links below. Contact us if you have a question about the terms that apply to your organization.

Learn more

Our goal is to release updates on the same day as the vendor, after they pass our security and installation validation checks.

Catalog releases generally occur between 1:00 p.m. and 5:00 p.m. Eastern Time. A high-risk security update released later in the day may result in an additional catalog release. Lower-priority, non-security updates released late in the day are generally included the following business day.

Check our catalog release history for published updates. Same-day release is a goal, not a guarantee for every update.

Learn more

Our catalog security process includes obtaining installers from official vendor sources, recording file hashes, and using VirusTotal to check eligible installers with multiple antivirus engines.

The published security validation guide also explains catalog signing and hash verification during publishing. These checks help identify suspicious files and confirm that downloaded content matches the validated content.

Read the guide for the workflow and scanning limitations. Malware scanning reduces risk but cannot guarantee that every threat will be detected.

For a closer look at this process, watch the Security Deep Dive Catalog Explanation video in our Trust Center. It explains the checks used to validate the integrity of updates in our catalog. You can also review our product data-flow diagrams to understand how update content moves through your environment.

Learn more

Patch My PC products collect telemetry to help improve our products and services. The data collected depends on the product.

Review the telemetry documentation for Publisher, Patch My PC Cloud, or Advanced Insights to understand the specific data collected by the product you use. Our Privacy Policy provides additional information about how we handle personal information.

Learn more

Getting Started
Products
Company
Resources
Additional resources