> ## Documentation Index
> Fetch the complete documentation index at: https://docs.minimus.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Trust Center

> Minimus commitments on service availability, vulnerability remediation, certifications, and data confidentiality

Trust is at the heart of security. Following are our promises to you.

## Service availability (Enterprise Edition)

Minimus maintains a service availability target of 99.9% uptime. You can see real time and historical availability on our [status page](https://docs.minimus.io/status).

## Vulnerability remediation policy (Enterprise Edition)

Minimus Enterprise Edition commits to vulnerability patching within set timeframes, excluding only rare and extraordinary exceptions.

**CISA KEV Active Exploits**

* Any active exploit vulnerability affecting a Minimus image will be remediated within 1 calendar day from the time a new release is available from the upstream project that fixes the vulnerability. An active exploit is a vulnerability listed in the CISA Known Exploited Vulnerabilities Catalog. [See how Minimus clearly marks active exploits in image cards and advisories](/remediate/threat-intel)

**SLAs set by vulnerability severity**

* A critical or high severity vulnerability will be remediated within 2 calendar days from the time a new release is available from the upstream project that fixes the vulnerability.
* All other vulnerabilities (Medium, and Low severity) will be remediated within 14 calendar days from the date a new release is available from the upstream project that fixes the vulnerability.

The above targets are provided under the applicable Minimus Vulnerability Remediation Policy. [**Contact us for further information**](https://support.minimus.io/support/home)

<Tip>
  See also our [supplementary remediation policies](/remediate/policies/remediation-policy) and [cherry picking policy](/remediate/policies/cherry-pick-patches)
</Tip>

## New version SLA (Enterprise Edition)

New upstream version releases are incorporated into Minimus images within **7 calendar days** of their original release. This timeline may be extended when significant upstream defects, breaking changes, or exceptional conditions necessitate additional validation.

This target is provided under the applicable Minimus Policy. [**Contact us for further information**](https://support.minimus.io/support/home)

## Certification

Minimus has secured [SOC 2](https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2) and [ISO 27001](https://www.iso.org/standard/27001) certification.

* SOC 2® accreditation is SOC for Service Organizations: Trust Services Criteria.
* ISO/IEC 27001 is the golden standard for information security management systems (ISMS). The accreditation covers information security, cybersecurity and privacy protection.

## Cookies

Minimus uses [Cookiebot](https://www.cookiebot.com/) to manage cookie consent on this site. You can review all cookies in use, including their names, purposes, and retention periods, and manage your personal consent preferences in our [Cookie Declaration](/cookie-declaration).