Vulnerabilities Updates
OpenSpace Logo

Trust Center

Start your security review
View & download sensitive information
Ask for information
ControlK

OpenSpace delivers enterprise-grade security, privacy, and compliance. The certifications and frameworks listed here demonstrate our commitment to earning and keeping our customers’ trust.

Use this Trust Center to learn more about our multi-layered approach to safeguarding our products and our customers’ data. You can also request access to our security and privacy documentation.

  • Balfour Beatty
  • Skanska i Sverige
  • Vinci Construction
  • Wates Group
  • Power Design
  • JLL
  • Rosendin
  • Lee Kennedy Co
  • Nibbi Brothers General Contractors
  • Kitchell Corporation
  • Commodore Builders
  • Gilbane
  • BAM Wonen
  • Tishman Speyer
  • Suffolk Construction
  • Mortenson
  • Willy Naessens BELGIË
  • Swinerton
  • HITT Contracting
  • Capital One
  • JTC Corporation
  • CapitaLand
  • City Developments Limited
  • Dura Vermeer
  • 清水建設株式会社【公式】
  • Fujita

Documents

Featured Documents

COMPLIANCESOC 2 Type 2

Subprocessors

Trust Center Updates

Vulnerabilities Updates

Vulnerabilities

PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619: OpenSpace platform not affected

On October 20, 2026, the PHP project announced a security release for two critical remote code execution vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 (sometimes called “php2shell”). The OpenSpace platform does not use PHP and is therefore not affected by these vulnerabilities.

We are also reviewing whether our subprocessors are exposed and will provide updates as they become available. Please send questions to security@openspace.ai.

If you need help using this Trust Center, please contact us.
Contact support
If you think you may have discovered a vulnerability, please send us a note.
Report issue