CrowdStrike announced on January 22, 2026 that it has achieved ISO/IEC 42001:2023 certification, making it one of the first cybersecurity vendors worldwide to validate its disciplined, externally audited approach to the responsible design, development and operation of AI-powered security. The certification covers key components of the Falcon® platform, including Endpoint Security, Falcon® Insight XDR and the Charlotte AI agent framework. An independent accredited body conducted a six-month audit of CrowdStrike’s AI management system, assessing governance policies, risk management processes and development practices. This milestone reinforces trust in CrowdStrike’s AI governance model and positions the company to help enterprise customers navigate emerging AI regulatory expectations while delivering automated threat detection and response at scale.

Building on its Global Data Sovereignty initiative, CrowdStrike revealed plans to deploy new in-country regional clouds in Saudi Arabia, India and the United Arab Emirates by mid-2026, with further geographies under evaluation. These local deployments will enable organizations in each jurisdiction to host Falcon® data within national borders while remaining fully connected to CrowdStrike’s global telemetry, threat intelligence and expert threat hunting services. According to CEO George Kurtz, this approach preserves a unified global defense posture by preventing regional silos and maintaining real-time visibility across shared infrastructure. The regional clouds will support mission-critical workloads for regulated industries and government agencies, offering the same AI-driven endpoint protection and extended detection and response capabilities as CrowdStrike’s core global platform.