Question 1

Is Airbyte Inc SOC 2 compliant?

Accepted Answer

Airbyte Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Airbyte Inc ISO 27001 certified?

Accepted Answer

According to Airbyte Inc's public trust center, Airbyte Inc is ISO 27001 certified. On SOC2C this listing is Listed.

Question 3

Is Airbyte Inc GDPR compliant?

Accepted Answer

According to Airbyte Inc's public trust center, Airbyte Inc is GDPR compliant. On SOC2C this listing is Listed.

Question 4

Is Airbyte Inc SOC 2 Type I or Type II?

Accepted Answer

Airbyte Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 5

Can I use Airbyte Inc's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Airbyte Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 6

Is Airbyte Inc penetration tested?

Accepted Answer

Airbyte Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 7

Is Airbyte Inc secure?

Accepted Answer

Security isn't a single yes/no, but Airbyte Inc is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does Airbyte Inc have a bug bounty or vulnerability disclosure program?

Accepted Answer

Airbyte Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@airbyte.com or via a /security page (Airbyte Inc lists a security contact).

Question 9

Who are Airbyte Inc's subprocessors?

Accepted Answer

Airbyte Inc lists 11 subprocessors on its trust center, including Google Cloud Platform, Amazon Web Services, Zendesk, Cloudflare, Datadog. Buyers use this for fourth-party risk review.

Question 10

Where does Airbyte Inc host or store data?

Accepted Answer

Airbyte Inc hosts on AWS, GCP, and handles User account information (personally identifiable), Usage data (non-personally identifiable). Data residency details are on its trust center.

Question 11

Where is Airbyte Inc's trust center or security page?

Accepted Answer

Airbyte Inc's trust center is at https://trust.airbyte.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

Does Airbyte undergo external independent assessments?

Accepted Answer

Yes - Airbyte received a clean SOC 2 Type 2 Assessment Report. We have also received our ISO 27001 certification.

Question 13

Does Airbyte retain customer data?

Accepted Answer

Airbyte does not retain any customer data. All customer data is ephemeral in Airbyte's system, existing temporarily during batch processing and then expunged once the data has been written to the destination.

Question 14

Do you provide SBOM (Software Bill of Material)

Accepted Answer

Yes - Airbyte provides SBOMs (Software Bill of Material) for all our public containers. The format we use is SPDX JSON. The location of the SBOM is dependent on if the container is a connector or part of the platform. ### Platform SBOM Our platform images have SBOMs built into their metadata. They can extracted from the container using docker cli. ``` sh# docker buildx imagetools inspect airbyte/: --format "{{json .SBOM}} ``` ### Connector SBOM Connector SBOMs are hosted independently from their images and can be downloaded from `https://storage.googleapis.com/prod-airbyte-cloud-connector-metadata-service/connector_insights/[connector-name]/latest/sbom.json` Our connector catalog contains the list of all our containers and their names

Question 15

Where can I find information about Airbyte's uptime and downtimes?

Accepted Answer

We recommend checking out our https://status.airbyte.com/. This will give you the ability to subscribe for updates, view uptimes, be informed of any outages, and view historical data.

Airbyte Inc

About

Compliance & infrastructure

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Technology peers that completed SOC 2

Action1

ELJUN LLC

equipifi

IntelligentSystems Corp