Question 1

Is Arcadia Solutions SOC 2 compliant?

Accepted Answer

Arcadia Solutions is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Arcadia Solutions HITRUST certified?

Accepted Answer

According to Arcadia Solutions's public trust center, Arcadia Solutions is HITRUST certified. On SOC2C this listing is Listed.

Question 3

Is Arcadia Solutions ISO 27001 certified?

Accepted Answer

According to Arcadia Solutions's public trust center, Arcadia Solutions is ISO 27001 certified. On SOC2C this listing is Listed.

Question 4

Is Arcadia Solutions HIPAA compliant?

Accepted Answer

According to Arcadia Solutions's public trust center, Arcadia Solutions is HIPAA compliant. On SOC2C this listing is Listed.

Question 5

Is Arcadia Solutions SOC 2 Type I or Type II?

Accepted Answer

Arcadia Solutions is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 6

Can I use Arcadia Solutions's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Arcadia Solutions's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 7

Is Arcadia Solutions penetration tested?

Accepted Answer

Arcadia Solutions hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 8

Does Arcadia Solutions have an ISO 27001 certificate?

Accepted Answer

Arcadia Solutions publishes an ISO certificate on its trust center; you can request access through SOC2C.

Question 9

Is Arcadia Solutions secure?

Accepted Answer

Security isn't a single yes/no, but Arcadia Solutions is SOC 2 Type II compliant and holds HITRUST, ISO 27001, SOC 2 Type II, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 10

Does Arcadia Solutions have a bug bounty or vulnerability disclosure program?

Accepted Answer

Arcadia Solutions hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@arcadia.io or via a /security page (Arcadia Solutions lists a security contact).

Question 11

Who are Arcadia Solutions's subprocessors?

Accepted Answer

Arcadia Solutions lists 5 subprocessors on its trust center, including Amazon Web Services, Auth0, Atlassian, Microsoft, Snowflake. Buyers use this for fourth-party risk review.

Question 12

Where does Arcadia Solutions host or store data?

Accepted Answer

Arcadia Solutions hosts on AWS, GCP, Azure. Data residency details are on its trust center.

Question 13

Where is Arcadia Solutions's trust center or security page?

Accepted Answer

Arcadia Solutions's trust center is at https://trust.arcadia.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 14

What type of infrastructure do you have?

Accepted Answer

All of Arcadia’s infrastructure, applications, and data provided by our customers are hosted by Amazon Web Services (AWS), the world’s most comprehensive and broadly adopted cloud service provider.

Question 15

Does Arcadia allow removable media?

Accepted Answer

No, protections are in place to ensure no removable media is used unless approved by security and where data is encrypted. All corporate devices are centrally managed and equipped with mobile device management software, anti-malware protection, and an endpoint detection and response solution.

Question 16

What malware and anti-virus protections are in place?

Accepted Answer

Arcadia utilizes several endpoint protection tools to ensure monitor systems to protect against malware and viruses, including a leading Endpoint Detection and Response solution.

Question 17

I need Arcadia to fill out a security or third-party risk assessment questionnaire – Who do I contact?

Accepted Answer

Please send your request to security@arcadia.io

Question 18

How is logging and monitoring accomplished at Arcadia?

Accepted Answer

We’ve implemented a comprehensive and cohesive strategy for logging, monitoring, and alerting. Logging processes are documented, reviewed, and updated (annually or as necessary) to ensure new threats are covered by the current process. Our 24x7 Security Operations Center (SOC) continuously monitors logs in real-time, ensuring that we can proactively respond to any potential security events. Using advanced correlation techniques, our SOC and on-staff security team performs active threat hunting to identify and mitigate risks before they escalate.

Arcadia Solutions

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked