SOC 2 Type II
Independent attestation
An independent report covers the design and operating effectiveness of relevant controls over a defined review period.
Request reportTrust, from customer data to product impact
Carbon Trail gives enterprise teams a clear view of how we protect customer information and govern the methods behind product and corporate impact calculations.
Start with the public record.
We publish the useful overview here. Distribution-restricted documents stay in a controlled evidence room so buyers can review current materials without exposing sensitive detail.
ISO/IEC 27001:2022
Management-system certification
Carbon Trail maintains a certified information security management system.
Request certificateData protection
Privacy programme
Our privacy programme is designed to support GDPR data-protection obligations and transparent handling of personal data.
Read privacy policySubprocessors
Current processing register
Review the current service provider register, processing purpose and location information in our controlled trust centre.
Request registerMethodology you can inspect.
Standards play different roles. This map distinguishes the foundations we build on, the references independently included in assurance, and the regional methods Carbon Trail supports.
Life-cycle assessment foundation
ISO 14040 / ISO 14044
The principles, framework, requirements and guidelines that underpin life-cycle assessment work.
Product carbon footprint
ISO 14067
Requirements and guidance for quantifying and reporting the carbon footprint of a product.
Calculation and data exchange
PACT methodology
A common approach for calculating and exchanging product carbon footprint information across value chains.
EU environmental footprint method
PEF / PEFCR Apparel & Footwear
Category rules translate the EU Product Environmental Footprint method into apparel and footwear modelling requirements.
France-specific textile method
French Environmental Cost
A dedicated workflow supports the French environmental cost method and the product data it requires.
Corporate and value-chain accounting
GHG Protocol
The accounting framework used for corporate inventories and Scope 3 value-chain emissions.
Scope matters. “Certified,” “attested,” “independently assured against,” and “supported” describe different evidence. Request the underlying documents for current boundaries, versions and conclusions.
What buyers usually ask.
Why do some documents require an access request?
Detailed audit reports, policies and technical evidence may contain sensitive information or carry distribution restrictions. Sprinto provides a secure way to request and review the current documents.
Is SOC 2 a certification?
No. SOC 2 is an independent attestation report covering controls over a defined review period. We use “certified” only for Carbon Trail’s ISO/IEC 27001:2022 management system.
Does methodology assurance cover every framework shown here?
No. The evidence type and scope are stated separately for each framework. Carbon Trail’s methodology has been independently assured against the GHG Protocol, PEFCR Apparel & Footwear and ISO 14067. Other entries explain foundations, supported methods or data-exchange frameworks.
Where can I review the current subprocessor list?
They are available on our Sprinto trust centre for the current register and its available processing details. For a procurement or privacy question, contact the Carbon Trail team directly.
Bring your security and methodology questions.
Request the current evidence in Sprinto, or speak with our team about a procurement requirement that is specific to your organisation.