Is this your company? Buyers are checking Avala AI Inc here. Claim avala.ai free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Avala AI Inc
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Avala AI Inc is SOC 2 Type II compliant. Avala AI Inc also holds GDPR.
About
Avala was founded in 2020 and is headquartered in San Francisco.
Compliance & infrastructure
Hosting
AWS
Documents
2Subprocessors
3- AAmazon Web Services · Infrastructure HostingUS
- GGoogle Workspace · Customer and Internal Communications (Avala)US
- IIntercom · Support Ticket Tool, In-application Support ChatUS
Compliance leadership
The person who leads Avala AI Inc's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Avala AI Inc's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Avala AI Inc SOC 2 compliant?
Avala AI Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Avala AI Inc GDPR compliant?
According to Avala AI Inc's public trust center, Avala AI Inc is GDPR compliant. On SOC2C this listing is Listed.
Is Avala AI Inc SOC 2 Type I or Type II?
Avala AI Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Avala AI Inc's SOC 2 for a vendor risk assessment?
Yes. Avala AI Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Avala AI Inc penetration tested?
Avala AI Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get Avala AI Inc's SOC 2 report?
Avala AI Inc's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is Avala AI Inc secure?
Security isn't a single yes/no, but Avala AI Inc is SOC 2 Type II compliant and holds GDPR, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Avala AI Inc have a bug bounty or vulnerability disclosure program?
Avala AI Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@avala.ai or via a /security page (Avala AI Inc lists a security contact).
Who are Avala AI Inc's subprocessors?
Avala AI Inc lists 3 subprocessors on its trust center, including Amazon Web Services, Google Workspace, Intercom. Buyers use this for fourth-party risk review.
Where does Avala AI Inc host or store data?
Avala AI Inc hosts on AWS. Data residency details are on its trust center.
Where is Avala AI Inc's trust center or security page?
Avala AI Inc's trust center is at https://trust.avala.ai. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Where are your servers located?
Avala's servers are located in AWS
Does Avala conduct penetration tests?
Avala engages with one of the best penetration testing consulting firms in the industry at least annually. All areas of the Avala platform and cloud infrastructure are in-scope for these assessments.
Do you encrypt data at rest?
All datastores with customer data, in addition to S3 buckets, are encrypted at rest. Sensitive collections and tables also use row-level encryption. This means the data is encrypted even before it hits the database so that neither physical access, nor logical access to the database, is enough to read the most sensitive information.
Technology peers that completed SOC 2
Action1
action1.com · United States · Technology
SOC 2 Type IIRenewal not public
ELJUN LLC
eljunllc.com · United States · Technology
SOC 2 Type IIRenewal not public
equipifi
equipifi.com · United States · Technology
SOC 2 Type IIRenewal not public
IntelligentSystems Corp
hyperbound.ai · United States · Technology
SOC 2 Type IRenewal not public