Brotli Vulnerability (CVE-2026-111497)
Carrot Logo

Trust Portal

Start your security review
View & download sensitive information
ControlK

Welcome to Carrot's Trust Center! Use this portal to learn about our security posture and request access to documentation.

Carrot provides our clients with a benefits solution that supports family-building, fertility, and hormonal health journeys. Registered members get access to the Carrot Platform, available in both web browser and mobile app, where they can view and manage their benefit and get direct support from our Care Team.

Documents

COMPLIANCEISO/IEC 27001

Trust Portal Updates

PHP2Shell Vulnerability (CVE-2026-109618 / CVE-2026-109619)

Vulnerabilities

As of November 2, 2026, Carrot continues to have no known impact from these vulnerabilities, and our expanded review has not identified any exposure. We will share updates if our assessment changes.

At this time, Carrot does not have any known impact from these vulnerabilities. We are continuing to monitor for potential exposure and will share updates if our assessment changes.

Brotli Vulnerability (CVE-2026-111497)

Vulnerabilities

At this time, Carrot does not have any known impact from this vulnerability. As a precaution, we have proactively patched and redeployed any systems using related technologies that support Carrot's services. We are continuing to monitor for potential exposure and will share updates if our assessment changes.

Subprocessors

If you need help using this Trust Portal, please contact us.
Contact support
Built onSafeBase by Drata Logo

Privacy Policy | Terms of Service | Terms of Data Processing