Question 1

Is BCW Group SOC 2 compliant?

Accepted Answer

BCW Group is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is BCW Group ISO 27001 certified?

Accepted Answer

According to BCW Group's public trust center, BCW Group is ISO 27001 certified. On SOC2C this listing is Listed.

Question 3

Is BCW Group SOC 2 Type I or Type II?

Accepted Answer

BCW Group is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use BCW Group's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. BCW Group's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is BCW Group penetration tested?

Accepted Answer

BCW Group hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Is BCW Group secure?

Accepted Answer

Security isn't a single yes/no, but BCW Group is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 7

Does BCW Group have a bug bounty or vulnerability disclosure program?

Accepted Answer

BCW Group hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@bcw.group or via a /security page (BCW Group lists a security contact).

Question 8

Who are BCW Group's subprocessors?

Accepted Answer

BCW Group lists 7 subprocessors on its trust center, including Google Workspace, Google Cloud Platform, GitLab, Opsgenie, Hellosign . Buyers use this for fourth-party risk review.

Question 9

Where does BCW Group host or store data?

Accepted Answer

BCW Group hosts on GCP, and handles Employee personally identifiable information, Credit card information, Personal health information, Customer Business identifiable information. Data residency details are on its trust center.

Question 10

Where is BCW Group's trust center or security page?

Accepted Answer

BCW Group's trust center is at https://trust.bcw.group. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 11

Does BCW Technologies (Node-as-a-Service) have a current information security certification?

Accepted Answer

Yes. BCW Technologies is certified SOC 2 Type II. You can download our audit report on the BCW Trust Center Page

Question 12

Does BCW Technologies conduct penetration tests?

Accepted Answer

Yes. we engage with one of the best penetration testing consulting firms in the industry at least annually. Our current preferred penetration testing partner is Mandiant, who is leader in cyber defense solutions by combining consulting services, threat intelligence, incident response, and attack surface management.

Question 13

Do you encrypt data at rest?

Accepted Answer

Yes, we encrypt all data at rest using AES-256 encryption, ensuring compliance with industry best practices and SOC 2 security requirements.

Question 14

Have there been any security incidents in the last 12months?

Accepted Answer

In the last 12 months, we have not experienced any security incidents that impacted the confidentiality, integrity, or availability of customer data. To ensure ongoing security, we have detailed incident response plan in place, including continuous monitoring, automated alerts, and regular security assessments.

BCW Group

About

Compliance & infrastructure

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Octopus Deploy

Newsworthy.ai

1099-Prep

Ask Ai