AARC-360 security & compliance
An overview of AARC-360's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, SOC 3, ISO 27001, ISO 27701, ISO 42001, HIPAA, PCI DSS, GDPR, CCPA, FedRAMP, HITRUST, CMMC, NIST CSF
Penetration testNot listed
SubprocessorsNot listed
HostingNot listed
Trust centerView
Security questions about AARC-360
- Is AARC-360 secure?
- Security isn't a single yes/no, but AARC-360 is SOC 2 Type II compliant and holds SOC 2 Type II, SOC 3, ISO 27001, ISO 27701, ISO 42001, HIPAA, PCI DSS, GDPR, CCPA, FedRAMP, HITRUST, CMMC, NIST CSF. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does AARC-360 have a bug bounty or vulnerability disclosure program?
- AARC-360 hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@aarc-360.com or via a /security page.
- Who are AARC-360's subprocessors?
- AARC-360's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
- Where does AARC-360 host or store data?
- AARC-360's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
- Where is AARC-360's trust center or security page?
- AARC-360's trust center is at https://aarc-360.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.