Welcome to Ontrack's Trust Center.
There is no room for missteps when it comes to security.
Given the nature of our business, we are entrusted with large amounts of sensitive and confidential information by our clients and understand that security is increasingly imperative for today’s corporations. We invest significant time and money to protect your most sensitive ESI.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Trust Center Updates
CVE-2026-109618 and CVE-2026-109619 Vulnerabilities in PHP
KLDiscovery is aware of recently disclosed vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, that could allow remote code execution. Based on our current review, we have not identified any affected systems in our environment. Our security monitoring has not detected any indicators of exploitation. We will continue to monitor vendor and industry guidance and will update this page if our assessment changes.
KLDiscovery 2026 SOC 2 Type II Report Now Available
KLDiscovery's annual SOC 2 Type II report for 2025-2026 is now available via KLDiscovery's Trust Center at https://trust.kldiscovery.com/?itemUid=fa950d02-cbb3-4010-b917-7137a7c2a982&source=click
Please reach out to your primary KLDiscovery contact if you have any questions.
CVE-2026-35300 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware
Following the review of the referenced vulnerability, it has been confirmed that the organization was impacted by vulnerability CVE-2026-35300 through its Oracle Cloud application environment.
It is important to note, however, that the Oracle Cloud platform in use is limited to supporting internal employee functions and does not store or process any client data. As such, the potential exposure is considered limited in scope.
The responsible team has verified that all required patches addressing this vulnerability were successfully applied during the maintenance window over the weekend of June 20th. At this time, the vulnerability is considered remediated
Vendor Advisory – Blancco Software Vulnerability (CVE‑2026‑43284)
Blancco Mobile Device Eraser (BMDE) version 5.11.1 has been officially released.This release includes the remediation of CVE-2026-43284 (“Dirty Frag”), a high-severity Linux kernel local privilege escalation vulnerability affecting certain environments.
CVE 2026 31431 and commonly referred to as “Copy Fail.”
KLDiscovery is aware of a recently disclosed vulnerability tracked as CVE 2026 31431 and commonly referred to as “Copy Fail". Our company has deployed vendor-recommended mitigation designed to reduce risk without requiring an immediate reboot. Also, KLDiscovery has no indicators of exploitation in our environment. We are continuing enhanced monitoring for indicators of exploitation.