Is this your company? Buyers are checking Askhapax here. Claim askhapax.ai free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Askhapax
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Askhapax is SOC 2 Type II compliant.
About
At Hapax, security is at the core of everything we build. As an enterprise AI platform trusted with sensitive organizational data, we protect our customers with industry-leading security practices, strict compliance standards, and rigorously tested controls. From encryption and access management to tenant isolation and continuous monitoring, every layer of our platform is designed with protection and trust in mind.
Compliance & infrastructure
Hosting
AWS
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Documents
2Subprocessors
2- AAdobe · Document Conversion
- AAmazon Web Services · Cloud provider
Compliance leadership
The person who leads Askhapax's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Askhapax's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Askhapax SOC 2 compliant?
Askhapax is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Askhapax SOC 2 Type I or Type II?
Askhapax is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Askhapax's SOC 2 for a vendor risk assessment?
Yes. Askhapax's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Askhapax penetration tested?
Askhapax hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get Askhapax's SOC 2 report?
Askhapax's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is Askhapax secure?
Security isn't a single yes/no, but Askhapax is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Askhapax have a bug bounty or vulnerability disclosure program?
Askhapax hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@askhapax.ai or via a /security page (Askhapax lists a security contact).
Who are Askhapax's subprocessors?
Askhapax lists 2 subprocessors on its trust center, including Adobe, Amazon Web Services. Buyers use this for fourth-party risk review.
Where does Askhapax host or store data?
Askhapax hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Askhapax's trust center or security page?
Askhapax's trust center is at https://trust.askhapax.ai. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
How can I obtain a copy of the SOC 2 report?
Hapax provides its SOC 2 Type 2 report to current and prospective customers under a mutual NDA. Request a copy directly from our Trust Center, contact your account representative or reach out to security@askhapax.ai to request a copy.
Where is customer data hosted?
The Hapax AI Platform operates entirely within a secure, U.S.-based cloud environment. All processing, storage, and data handling occurs within Hapax's controlled infrastructure with encryption applied at rest and in transit.
How is customer data isolated?
Each customer is provisioned with a dedicated instance of the Hapax AI Platform. Data is logically separated at the tenant level, and access is controlled through customer-managed authentication with multi-factor authentication support.
Does Hapax encrypt data at rest and in transit?
Yes. All data is encrypted in transit using TLS and encrypted at rest using AES-256. Backups are also encrypted with access restricted to authorized personnel.
How does Hapax manage vulnerabilities?
Hapax performs continuous vulnerability scanning on all in-scope systems and engages independent third parties for annual penetration testing. Identified vulnerabilities are tracked to remediation in accordance with defined SLAs based on severity.
Does Hapax have an incident response program?
Yes. Hapax maintains a documented incident response plan covering detection, containment, breach determination, notification, and post-incident review. The plan is tested at least annually and communicated to all personnel.
How does Hapax control access to production systems?
Production access follows the principle of least privilege. Access reviews are conducted on a recurring basis to verify permissions remain appropriate, and multi-factor authentication is enforced across corporate and production environments.
Does Hapax perform employee background checks?
Yes. Background checks are conducted on all employees as part of the hiring process. All personnel are required to complete security awareness training upon hire and on an annual basis.
How do you handle the data we provide?
Customer data uploaded to the Hapax platform is used solely to deliver AI-powered knowledge automation services to your organization. Hapax does not sell, share, or use customer data for training general-purpose models. Data handling, retention, and deletion are governed by your customer agreement and Hapax's documented data management policies.
Do you support Single Sign-On (SSO)?
Yes. The Hapax AI Platform supports SSO integration with multi-factor authentication. Authentication is managed on a per-tenant basis, allowing your organization to enforce its own identity and access policies.
Do you have an established bug bounty program?
Hapax welcomes responsible disclosure of potential security vulnerabilities. If you have identified a security concern, please contact [security@askhapax.ai](mailto:security@askhapax.ai) with details and our team will respond promptly.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public