Evotix Trust Center
Welcome to the Evotix 360 Trust Center
At Evotix, safeguarding your data is a core part of who we are. Our Trust Center is your central resource for understanding our security practices, data privacy commitments, and compliance efforts. Here, you can explore our security posture and request access to detailed documentation.
If you have any queries or not finding what you need, please email information.security@evotix.com
Product Security
We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.
Reports
We may provide security-related reports upon request.
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
App Security
We take application security seriously and are putting together a program to monitor internal apps.
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
ESG
We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.
Legal
We take legal matters seriously and we always engage our legal counsel to review all commercial activities. Please contact us if you have any questions.
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Infrastructure
We take great care to work with best-in-class infrastructure providers that provide secure computing and storage. We are happy to provide more details about our infrastructure upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Policies
We are currently working with experts to put together our company policies. Please contact us for more details.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Evotix Trust Center Updates
PHP Vulnerability (CVE-2026-109618 & CVE-2026-109619) Update
Security update: PHP vulnerabilities (CVE-2026-109618 / CVE-2026-109619) “PHP2Shell”
Published on Oct 22, 2026
On 21 October 2026, two critical vulnerabilities affecting PHP were publicly disclosed (CVE-2026-109618 and CVE-2026-109619, collectively referred to as “PHP2Shell”). Both are memory-handling flaws that could potentially allow an attacker to execute malicious commands on, or otherwise compromise, an affected server.
Impact on Evotix
Evotix Learn and the Evotix corporate website were running affected versions of PHP. No other Evotix products were affected.
Actions taken
Evotix Learn: A new release containing the patched PHP version was deployed, and the update was completed across all Learn instances by 00:45 UK time on 22 October 2026.
Evotix corporate website: Our hosting partner fully patched the platform by 02:19 UK time on 22 October 2026.
Customer action required
No action is required from you. The fixes were applied by Evotix and our hosting partner, and no changes are needed to your configuration or user accounts.
Our assessment
We have reviewed our logs and monitoring for the period between public disclosure and patching, and have found no evidence that these vulnerabilities were exploited against Evotix systems or customer data.
If you have any questions or concerns, please contact the Evotix Information Security team on information.security@evotix.com.