Question 1

Is 360 Privacy SOC 2 compliant?

Accepted Answer

360 Privacy is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is 360 Privacy SOC 2 Type I or Type II?

Accepted Answer

360 Privacy is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 3

Can I use 360 Privacy's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. 360 Privacy's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 4

Is 360 Privacy penetration tested?

Accepted Answer

360 Privacy hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 5

Does 360 Privacy offer a Data Processing Agreement (DPA)?

Accepted Answer

360 Privacy publishes a DPA on its trust center; you can request access through SOC2C.

Question 6

Is 360 Privacy secure?

Accepted Answer

Security isn't a single yes/no, but 360 Privacy is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 7

Does 360 Privacy have a bug bounty or vulnerability disclosure program?

Accepted Answer

360 Privacy hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@360privacy.io or via a /security page (360 Privacy lists a security contact).

Question 8

Who are 360 Privacy's subprocessors?

Accepted Answer

360 Privacy lists 5 subprocessors on its trust center, including Amazon Web Services, Office 365, Google Cloud Platform, HubSpot, Atlassian. Buyers use this for fourth-party risk review.

Question 9

Where does 360 Privacy host or store data?

Accepted Answer

360 Privacy hosts on AWS, GCP. Data residency details are on its trust center.

Question 10

Does 360 Privacy offer a Data Processing Agreement (DPA)?

Accepted Answer

360 Privacy publishes a DPA on its trust center. You can request access through SOC2C.

Question 11

Where is 360 Privacy's trust center or security page?

Accepted Answer

360 Privacy's trust center is at https://trust.360privacy.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

I found a security bug. Do you have an established bug bounty program?

Accepted Answer

Please contact us at security@360privacy.io to report any security issues

Question 13

Can you provide the locations for your data centers?

Accepted Answer

360 Privacy does not manage any of our own data centers, all data center operations are outsourced to AWS as our data center hosting and management partner. Our AWS region is US-East

Question 14

Do you support Single Sign-On (SSO)?

Accepted Answer

Yes, if you are a customer, please contact your customer experience resource.

Question 15

Can you provide a copy of your Information Security Policy?

Accepted Answer

Yes, all current and future customers can obtain an up to date overview of our internal Security Program. Please email security@360privacy.io to request a copy.

Question 16

Do you encrypt data at rest?

Accepted Answer

Yes, we encrypt data using AES-256 encryption to protect sensitive information at rest. For data in transit, we implement TLS (Transport Layer Security) to ensure secure communication between systems. Additionally, all employee machines are equipped with full-disk encryption, further safeguarding sensitive data at the device level. These encryption measures are part of our comprehensive security framework designed to protect both customer and internal data against unauthorized access and potential breaches.

Question 17

Do you have a Data Processing Agreement (DPA)?

Accepted Answer

Yes, you can find our DPA here, - https://www.360privacy.io/dataprocessingagreement

Question 18

Do you have a standard Subscription Agreement?

Accepted Answer

Yes, please find our standard terms here, - https://www.360privacy.io/360-privacy-services-agreement

360 Privacy

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Legal & Government peers that completed SOC 2

Anthropic PBC

whiz.ai

DirectMailers

Ruddr