SOC2C

Is this your company? Buyers are checking BetterCloud here. Claim bettercloud.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free
BetterCloud logo

BetterCloud

Trust level
Listed
Unverified

Sourced from public information. Not yet verified by the company.

BetterCloud is SOC 2 Type II compliant. BetterCloud also holds ISO 27001, GDPR, and CCPA.

Framework
Auditor
Last report
Renewal
View official trust center ↗

About

BetterCloud is the market-leading SaaS management platform, enabling IT teams to eliminate up to 78% of SaaS management work. BetterCloud automates onboarding, offboarding & mid-lifecycle changes, SaaS application access & entitlements, and security policies in a multi-SaaS environment. With centralized granular data protection capabilities, BetterCloud automatically preempts threats and keeps company data safe. By streamlining and automating critical work like user lifecycle processes and day-to-day operations, BetterCloud's thousands of customers enjoy greater operational efficiency and empl

Compliance & infrastructure

Hosting
AWSGCP
Data handled
Employee personally identifiable informationPersonal health information

Subprocessors

21
  • G
    Google LLC · Hosting, Storage and Processing Customer Data
    HQ Location - US
  • A
    Auth0, Inc. · Security - Authentication
    HQ Location - US
  • P
    Pendo.io, Inc. · Data Analytics
    HQ Location - US
  • F
    FullStory, Inc. · Data Analytics
    HQ Location - US
  • M
    Marketo, Inc. · Marketing
    HQ Location - US
  • S
    Salesforce.com, Inc. · Customer Service
    HQ Location - US
  • T
    Twilio Inc. · Customer Support
    HQ Location - US
  • E
    Elevio Pty Ltd. · Customer Service
    HQ Location - AU
  • Z
    Zoom Video Communications, Inc · Video Communication
    HQ Location - US
  • B
    Bugsnag, Inc. · Error Monitoring
    HQ Location - US
  • A
    Atlassian Pty Ltd. · Project, Ticket, and Operations Management
    HQ Location - AU
  • A
    Appcues, Inc. · Data Analytics
    HQ Location - US
Show all 21 subprocessors
  • O
    Olark (Habla, Inc.) · Customer Service
    HQ Location - US
  • A
    Amazon Web Services · Transfer - Machine Learning
    HQ Location - US
  • E
    Egnyte · File Sharing
    HQ Location - US
  • C
    Customer.io · Customer Service
    HQ Location - US
  • Z
    Zendesk · Customer Service
    HQ Location - US
  • C
    Camunda, Inc · Workflow Service
    HQ Location - US
  • C
    Codium Ltd. (dba Qodo) · Error Monitoring
    HQ Location - IL
  • R
    Raintank Inc. (dba Grafana Labs) · Monitoring
    HQ Location - US
  • C
    CoreStack
    HQ Location - US

Compliance leadership

The person who leads BetterCloud's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. BetterCloud's penetration test vendor isn't listed yet.

Claim this profile to add it.

Recent updates

What’s new in BetterCloud: Spring 2026Jun 2026

A new quarter means new surface area to manage. Employees have adopted tools you don’t know about, sensitive files are being shared without context, and lifecycle events in your HR system still aren’t fully wired to your provisioning workflows. This spring, BetterCloud is closing those gaps with the Chrome Browser Extension for real-time SaaS discovery, Google Drive Labels in File Governance, and new triggers and actions to automate the moments that matter. See every app your team is actually using with the Chrome Browser Extension --------------------------------------------------------------------------- Your SSO shows you what’s approved. Your ERP shows you what’s paid for. But neither tells you what employees are actually using in the browser every day, and that gap is where shadow IT and shadow AI thrive. !Dashboard displaying software products with pricing type, active users count, and activity percentage for Asana, G Suite, Atlassian, LastPass. The BetterCloud Chrome Browser Extension closes that final gap by sitting where work actually happens. It monitors URLs, domains, and session activity in real time to surface apps that traditional API-based discovery misses. You’ll know who’s logging in, what they’re using, and how often, all mapped to real user identities. Details to get started in this support article. Understand and protect sensitive data with Google Drive…

What’s new in BetterCloud: Winter 2026Mar 2026

The modern IT landscape moves fast, and your SaaS management strategy should move faster. Over the last quarter, the BetterCloud team has focused on delivering more granular control over your automated governance, ensuring that essential collaborations and sensitive data classifications remain uninterrupted while your environment stays secure. Whitelist emails _and_ files in File Governance ------------------------------------------------ Cleanup policies are essential for maintaining a secure environment, but they can sometimes disrupt critical collaborations. Based on your feedback, we’ve introduced two highly-requested features to provide more granular control. !Settings page displaying trusted users’ email addresses, a list of trusted files with names and locations, and manage entry options. ### Allow listed emails You can now protect individual external email addresses from automated cleanup policies. This is perfect for scenarios where you’re working with external consultants or partners, ensuring their access to shared files isn’t accidentally revoked. ### Allow listed files Similarly, you can now allow-list specific files to protect them from automated permission rollbacks. This ensures that documents intended for public viewing, such as those linked on your website, remain accessible without interruption. Refine your data with muted product usage insights…

Monthly product roundup – July/August 2025Nov 2025

New + updated integration releases: ----------------------------------- - User Automation/ULM: Figma, BambooHR, Box, Kiteworks, Sentry - Spend Optimization: Expensify, Gitlab, Postman, ServiceNow, Teamwork, TestRail Google Cloud Identity SSO data ingestion now supported (via SAML) ☁️ -------------------------------------------------------------------- For domains with Google Cloud Identity – SAML enabled in their Google Workspace environment, more detailed usage is now available, providing more comprehensive SaaS utilization insights than those available through Google OAuth alone. With this update, admins in BetterCloud Spend Optimization can now view which employees have been provisioned access to specific tools and how frequently they log in. To learn more about Spend Optimization now supporting Google Cloud Identity SSO data ingestion, please see this help article. Contract Concierge improvements – now with support for subscriptions! 📥 ------------------------------------------------------------------------ The BetterCloud Contract Concierge has been overhauled with new enhancements for contract and subscription management capabilities. In-app ingestion within the Spend Optimization module now supports subscription uploads together with contract uploads. Additionally, new status updates were developed for submitted contracts and subscriptions, making it easier to edit or…

Monthly product roundup – April 2025May 2025

FEATURES Refined BambooHR integration with thoughtful enhancements --------------------------------------------------------- You asked and we listened! “We would like the ability to enable the BambooHR integration to sync the ‘preferredName’ and ‘Location’ attributes so user profiles reflect employees’ preferred names and work locations.” Done and done. Search bar redesign: Pin your most used items --------------------------------------------- In busy IT environments, speed matters. Repeatedly searching for the same workflows, integrations, or user data slows you down. That’s why we’ve introduced pinning in Search—a faster way to access what matters most. With the new pinning feature, you can: - Pin items like workflows, integrations, users, groups, roles, alerts, files, and articles. !Dashboard interface for the April 2025 product roundup displays navigation tabs at the top, a prominent search bar, and organized lists of files and groups. It is showing the new pinning feature in the search bar navigation. - Instantly save items from search results using the new pin icon. - Access all pinned content via the pin icon in the search bar. - Search within your pinned items for quick retrieval. - Get helpful feedback when no pins or results are found. This update is part of our redesigned search experience, built to reduce repetitive tasks and give IT teams a personalized, efficient…

Monthly product roundup – March 2025Apr 2025

FEATURES Spend Optimization: Product suites for smarter data aggregation --------------------------------------------------------------- - New feature to group related products (e.g., Atlassian, Adobe, Salesforce) under one umbrella. - Provides a unified view of spend, usage, and contract data for entire product suites. - Available now in the Spend Optimization module! Learn More Wrike IC integration: Enhanced offboarding features --------------------------------------------------- There are new actions in User Automation for Wrike IC integration. These include: - Suspend/Disable Users - Delete Accounts with File Transfer - Remove Users from All Groups/Projects License Reclamation adds ChatGPT and Gitlab to the mix ------------------------------------------------------ With the addition of ChatGPT and Gitlab this month, the library of available integrations available for license reclamation grows even larger! The current list includes major software heavy hitters such as Asana, Box, Calendly, Docusign, Dropbox, Expensify and PagerDuty. If you’re on BetterCloud Complete, you can start using this feature today. We can help you upgrade and unlock its full potential if you’re not currently on this plan. To get started, check out our guide. Have questions? Reach out to your success manager or email [success@bettercloud.com](mailto:success@bettercloud.com) and we’ll be happy to…

This listing is partial

6/11 details · 55%

SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

  • Auditorraises trust
    Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
  • Report dateraises trust
    Add your most recent report period so buyers see how current your SOC 2 is.
  • Renewal date
    Add your renewal window so buyers know your coverage is active.
  • Documents
    List the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
  • Security controls
    Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is BetterCloud SOC 2 compliant?
BetterCloud is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is BetterCloud ISO 27001 certified?
According to BetterCloud's public trust center, BetterCloud is ISO 27001 certified. On SOC2C this listing is Listed.
Is BetterCloud GDPR compliant?
According to BetterCloud's public trust center, BetterCloud is GDPR compliant. On SOC2C this listing is Listed.
Is BetterCloud CCPA compliant?
According to BetterCloud's public trust center, BetterCloud is CCPA compliant. On SOC2C this listing is Listed.
Is BetterCloud SOC 2 Type I or Type II?
BetterCloud is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Answers published by BetterCloud

Reproduced from BetterCloud's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗

Where is BetterCloud's Services hosted?
BetterCloud is hosted on the Google Cloud Platform (GCP) in the US. For more information regarding Google Cloud Platform Security, please view Google’s own Security and Privacy Documentation: here.
Does BetterCloud support Single Sign-On (SSO)?
BetterCloud users of the BetterCloud and File Governance applications are required to authenticate to the BetterCloud application via single sign-on (SSO) with a supported identity provider (Google, Microsoft, or Okta). BetterCloud users of the Spend Optimization application may use SSO with a supported identity provider or set up login credentials with a unique password.
Who is BetterCloud and what services does it provide?
BetterCloud is a SaaS provider that enables your IT and security teams to discover, manage and secure some of the SaaS applications your teams already use (e.g., Google Workspace, Slack, Dropbox, etc.). In our MSA, we call these SaaS applications, “Non-BetterCloud applications”. Our platform only connects to the SaaS apps that your team decides to connect to it. Your IT and/or security teams are the users of our platform and they configure the application to automate certain workflows, actions, and alerts based on the needs of your company. For example, if a new employee joins the sales team, they may need to be provisioned with accounts for Google Workspace, join the sales slack channels, and access the sales SaaS apps. If an employee leaves your org, your team will want to make sure they are deprovisioned correctly and their files are transferred to their manager. BetterCloud helps with all these actions and others which are initiated and configured by your teams in our platform.
If BetterCloud is helping me manage my SaaS apps, does BetterCloud have access to all of the data, including personal information, in all the SaaS applications that my company uses?
Absolutely not! BetterCloud only processes certain personal information of the employees and other individuals with log-in access to the SaaS apps your IT or security team connects to BetterCloud. We refer to these folks as “end user accounts.” The type of personal information we process from end user accounts to provide the services is generally limited to account profiles for those SaaS apps (think of it as your Gmail profile) which typically include first and last name, email address, work address, username, and IP address. For your admins of our platform (your IT and security teams), we’ll also have access to the IP addresses they uses to log-in, admin activity in the platform (e.g., last sign in), helpdesk tickets submitted, and satisfaction data (e.g., a response to a question like “please rate your experience”). Based on how your teams use our platform, we may also process metadata related to the documents and emails (e.g., Owner, Doc Title, Shared With, Exposure Level, Last Updated, Doc Type, File Extension, Doc Size) stored in the SaaS apps (e.g., Google Drive, Dropbox, Box) connected to our platform. Please note our access is based on the permissions set and controlled by your IT and security teams and we generally do not access the content of those documents or emails. By the way, we don’t process sensitive information such as payment card or protected health information so no need, for example, to enter into BAAs :).
Does BetterCloud use any subprocessors? How do I know my company can trust those third parties?
Yes. You can see them here. Our relationship with each of them is subject to our third-party security management program to ensure they meet our rigorous security and privacy standards. Each of them has entered into a DPA with us. If we ever add new subprocessors or replace them we would notify you and you would have an opportunity to object pursuant to section 4.2 of the DPA provided.

Business & Industrial peers that completed SOC 2