Welcome to The Model N Trust Center. Within this Trust Center, you’ll find information about our security governance, data protection practices, compliance posture, and operational safeguards.
Our security program is anchored in globally recognized standards, including SOC and ISO frameworks. These standards guide how we manage risk, monitor our environment, and continuously improve our controls. Through regular assessments, independent audits, and ongoing oversight, we work to ensure our practices align with recognized expectations for confidentiality, availability, and integrity.
Planet 9 Inc.
Booz Allen Hamilton
A-LIGN
CyberGuard Compliance
Tevora
Subprocessors
Trust Center Updates
Model N Not Impacted by PHP2Shell related vulnerabilities
Model N is aware of the recently disclosed critical security vulnerabilities CVE-2026-109618 and CVE-2026-109619, which affect the PHP programming language runtime and may enable unauthenticated remote code execution in vulnerable environments. Both vulnerabilities were disclosed on October 21, 2026.
Following an assessment of our product development technology stack, Model N confirms that our products and services are not impacted by these vulnerabilities because PHP is not used in the development of our products.
Our products are developed using technologies other than PHP and do not rely on the vulnerable PHP runtime as part of their application execution environment.
Model N maintains a defense-in-depth security program incorporating secure software development practices, vulnerability management, access controls, and perimeter security safeguards to protect our products, services, and customer data.
For any questions, please mail to security@modeln.com.
Recommended: https://www.helpnetsecurity.com/2026/10/21/php2shell-php-vulnerabilities-patched-cve-2026-109618-cve-2026-109619/
Model N Not Impacted by UAE AWS Data Center Disruption
On March 3, 2026 Model N became aware that AWS Data Center was impacted by certain objects. According to AWS, the incident occurred on March 1st. The fire protection services had to shut off power to the facility, which is still down a day later.
“One of our Availability Zones was impacted by objects that struck the data centre, creating sparks and fire,” AWS said in a post on its Health Dashboard, almost undoubtedly meaning a drone strike.
Later, the company said the issue has also affected another Availability Zone in “the ME-CENTRAL-1 Region.”
Recommended: https://health.aws.amazon.com/health/status - provides an overview of the reported incident.
Model N Not Impacted by Gainsight Security Incident
Model N became aware of the Gainsight-related security activity shortly after Salesforce and multiple threat intelligence outlets reported unusual OAuth activity tied to applications published by Gainsight that were connected to customer Salesforce environments.
Recommended: Salesforce Security Advisory: provides an overview of the reported unusual activity and outlines recommended actions for customers using Gainsight integrations.
Model N Not Impacted by Salesloft-Drift Incident
Model N became aware of the Salesloft-Drift security incident shortly after news reports were released regarding the compromise.
Threat intelligence sources and news outlets reported that this incident impacted customers of the Drift product, produced by Salesloft, who had the Drift integration enabled within Salesforce.
Recommended: Widespread Data Theft Targets Salesforce Instances via Salesloft Drift, Google Threat Intelligence Group