Question 1

Is Apify SOC 2 compliant?

Accepted Answer

Apify is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Apify GDPR compliant?

Accepted Answer

According to Apify's public trust center, Apify is GDPR compliant. On SOC2C this listing is Listed.

Question 3

Is Apify SOC 2 Type I or Type II?

Accepted Answer

Apify is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use Apify's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Apify's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is Apify penetration tested?

Accepted Answer

Apify hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Can I get Apify's SOC 2 report?

Accepted Answer

Apify's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 7

Is Apify secure?

Accepted Answer

Security isn't a single yes/no, but Apify is SOC 2 Type II compliant and holds GDPR, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does Apify have a bug bounty or vulnerability disclosure program?

Accepted Answer

Apify hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@apify.com or via a /security page (Apify lists a security contact).

Question 9

Who are Apify's subprocessors?

Accepted Answer

Apify lists 4 subprocessors on its trust center, including Amazon Web Services, MongoDB Atlas, Mezmo (ex-LogDNA), Snowflake. Buyers use this for fourth-party risk review.

Question 10

Where does Apify host or store data?

Accepted Answer

Apify hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information. Data residency details are on its trust center.

Question 11

Where is Apify's trust center or security page?

Accepted Answer

Apify's trust center is at https://trust.apify.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

Where can I find information about Apify's uptime and downtimes?

Accepted Answer

We recommend checking out our Status Page. This will give you the ability to subscribe for updates, view uptimes, be informed of any outages, and view historical data.

Question 13

Where can I learn about product updates and new features?

Accepted Answer

To learn more about product releases, see Apify's changelog.

Question 14

Where can I find Apify's terms and policies?

Accepted Answer

See legal section of Apify's documentation.

Question 15

How do I report a potential security issue or vulnerability?

Accepted Answer

To find out how we handle security reports, vulnerabilities, and reward findings, please see security page within Apify's documentation.

Apify

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

1099-Prep

Octopus Deploy

Ask Ai