Is this your company? Buyers are checking Alchemi here. Claim alchemi.bio free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Alchemi
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Alchemi is SOC 2 Type II compliant. Alchemi also holds ISO 27001, and GDPR.
About
Alchemi is a cutting-edge company focused on revolutionizing drug development processes. It aims to address inefficiencies in drug development. Leveraging AI, Alchemi accelerates report generation and review, helping pharmaceutical sponsors operate more efficiently. Alchemi is led by a multidisciplinary team with expertise in drug development, computer science, and AI. At Alchemi, we emphasizes the protection of personal and non-personal data collected through its website and services. Alchemi employs reasonable measures to safeguard information from unauthorized access or disclosure, though
Compliance & infrastructure
Hosting
AWSGCP
Documents
54Documents
- SOC 2 Type IRequest
- SOC 2 Type IIRequest
- SOC 2 Bridge LetterRequest
- ISO 27001:2022Request
- ISO 27001Request
- Penetration TestRequest
- Access Control PolicyRequest
- Asset Management PolicyRequest
- Business Continuity and Disaster RecoveryRequest
- Code of ConductRequest
- Cryptography PolicyRequest
- Data Management PolicyRequest
- Human Resource Security PolicyRequest
- Incident Response PlanRequest
- Information Security Policy (AUP)Request
- Information Security Roles and ResponsibilitiesRequest
- Operations Security PolicyRequest
- Physical Security PolicyRequest
- Risk Management PolicyRequest
- Secure Development PolicyRequest
- Third-Party Management PolicyRequest
- 00-ISMS Master List of DocumentsRequest
- 01-ISMS Scope of the ISMSRequest
- 02-ISMS Information Security Management System (ISMS) PolicyRequest
- 03-ISMS Roles, Responsibilities, and AuthoritiesRequest
- 04-ISMS Risk Assessment and Risk Treatment ProcessRequest
- 05-ISMS Procedure for the Control of Documented InformationRequest
- 06-ISMS Information Security Communication PlanRequest
- 07-ISMS Procedure for Internal AuditsRequest
- 08-ISMS Procedure for Management ReviewRequest
- 09-ISMS Procedure for Corrective Action and Continual ImprovementRequest
- 10-ISMS Information Security Objectives PlanRequest
- 11-ISMS Statement of ApplicabilityRequest
- 12-ISMS Relevant Laws, Regulations, and Contractual RequirementsRequest
- GDPR Compliance PolicyRequest
- GDPR Incident Response PlanRequest
- 02_QMS Manual, Policy and ObjectivesRequest
- 04_QMS Process for Management Reviews, Internal Audits, and Performance MonitoringRequest
- 05_QMS Management of Nonconformity ProcedureRequest
- 08_QMS Archiving PolicyRequest
- Customer offboarding and Exit MeasuresRequest
- GxP Software at AlchemiRequest
- Architecture and Data Flow DiagramRequest
- AI Governance PolicyRequest
- Quarterly AppSec ReportRequest
- DPA TemplateRequest
- Software Bill of MaterialsRequest
- Security Controls OverviewRequest
- 01 - ALC-URS-2.4.1Request
- 02 - ALC-VP-2.4.1Request
- 03 - ALC-TS-2.4.1Request
- 04 - ALC-VR-2.4.1Request
- 05 - ALC-RN-2.4Request
- Alchemi Pentest Report 20260610Public
Subprocessors
3- AAmazon Web Services · Cloud provider
- SSupabase · Database Service
- GGoogle Cloud Platform · AI Services
Compliance leadership
The person who leads Alchemi's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Alchemi's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Alchemi SOC 2 compliant?
Alchemi is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Alchemi ISO 27001 certified?
According to Alchemi's public trust center, Alchemi is ISO 27001 certified. On SOC2C this listing is Listed.
Is Alchemi GDPR compliant?
According to Alchemi's public trust center, Alchemi is GDPR compliant. On SOC2C this listing is Listed.
Is Alchemi SOC 2 Type I or Type II?
Alchemi is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Alchemi's SOC 2 for a vendor risk assessment?
Yes. Alchemi's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Alchemi penetration tested?
Yes — Alchemi undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Can I get Alchemi's SOC 2 report?
Alchemi's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Does Alchemi have an ISO 27001 certificate?
Alchemi publishes an ISO certificate on its trust center; you can request access through SOC2C.
Does Alchemi offer a Data Processing Agreement (DPA)?
Alchemi publishes a DPA on its trust center; you can request access through SOC2C.
Does Alchemi have a penetration test report?
Alchemi publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Is Alchemi secure?
Security isn't a single yes/no, but Alchemi is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, GDPR, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Alchemi have a bug bounty or vulnerability disclosure program?
Alchemi hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@alchemi.bio or via a /security page (Alchemi lists a security contact).
Who are Alchemi's subprocessors?
Alchemi lists 3 subprocessors on its trust center, including Amazon Web Services, Supabase, Google Cloud Platform. Buyers use this for fourth-party risk review.
Where does Alchemi host or store data?
Alchemi hosts on AWS, GCP. Data residency details are on its trust center.
Does Alchemi offer a Data Processing Agreement (DPA)?
Alchemi publishes a DPA on its trust center. You can request access through SOC2C.
Where is Alchemi's trust center or security page?
Alchemi's trust center is at https://securitytrust.alchemi.bio. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
How is data treated at Alchemi?
At Alchemi Bio, we are dedicated to safeguarding your data with the highest standards of privacy and security. All sensitive and confidential data is encrypted at rest using industry-standard strong encryption (AES-256), and is also protected in transit with TLS. We do not use your data to train AI models or for any purpose beyond providing our services to you. Each customer operates within a single-tenant, logically segregated Virtual Private Cloud (VPC) environment, ensuring that your data is fully isolated from other customers and never co-mingled. Our encryption and data handling practices are governed by robust internal policies and are regularly reviewed to ensure compliance with leading security frameworks such as SOC 2 and GDPR. Access to encryption keys is strictly limited to authorized personnel with a legitimate business need, and all key management processes follow best practices and regulatory requirements. By implementing these controls, Alchemi Bio ensures that your data remains secure, private, and protected against unauthorized access at all times.