Trust Center
Welcome to Xylem's Trust Center
At Xylem, we seek to inspire trust in our solutions, empowering customers to solve the world's greatest water challenges. Water is critical infrastructure, and protecting the systems and data that run it is central to how we build and operate. Customers, partners, and employees can use this portal to understand our security posture and request security documentation for specific products and services.
Product trust centers
Parts of Xylem's digital portfolio maintain their own trust centers, where you can review externally audited security certification reports and product-specific compliance, governance, and privacy information:
- Xylem Vue — digital solutions that bring utility data together for real-time visibility and decision support across the water cycle.
- Link2Site — remote monitoring and control for water and wastewater operations.
Security and compliance information for additional parts of Xylem's digital portfolio will be published here as it becomes available.
Our security approach
Across our digital water portfolio, we take a defense-in-depth approach — building security in by design and layering network security, secure connectivity, strong authentication, continuous monitoring, and independent testing — to reduce risk while preserving the operational visibility utilities need to run their systems effectively.
Standards and frameworks
Our program is guided by industry-standard frameworks including NIST CSF, IEC 62443 for industrial and operational technology security, ISO/IEC 27001, and SOC 2 Type II, with secure development practices informed by NIST SSDF and OWASP. We align to applicable regional requirements such as the EU Cyber Resilience Act, NIS2, and GDPR.
Compliance
Xylem is dedicated to compliance and maintains externally audited security and privacy certifications for our various products (i.e. ISO, SOC, IEC 62443 4-1). Please refer to our product Trust Centers from the drop down above for applicable compliance reports.
Trust Center Updates
Critical PHP Security Vulnerabilities
As of October 27, 2026, Xylem has assessed the impact of critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) on its products and services as follows:
No Xylem products have been confirmed as affected, and no evidence of exploitation has been found.
If an affected product is identified, Xylem will update this advisory with relevant information.
At Xylem, we consider the protection of our customers’ information and operations a top priority. Xylem is aware of the recently disclosed vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). We are in the process of determining impacted systems and environments, and are applying patches and/or mitigations to Xylem-hosted systems and environments where required.