Is this your company? Buyers are checking Black Kite here. Claim blackkite.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Black Kite
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Black Kite is SOC 2 Type II compliant. Black Kite also holds GDPR, ISO 27001, and CSA STAR.
About
Black Kite is a non-intrusive intelligence-gathering platform that identifies critical vulnerabilities, data breaches, and can detect the likelihood of a ransomware attack with high fidelity data. It does not retain, reuse, store any specific information that is not already publicly available.
Compliance & infrastructure
Hosting
GCP
Data handled
Customer personally identifiable information
Documents
1GENERAL
Subprocessors
5- GGoogle Cloud Platform · Cloud Hosting PlatformUnited States
- GGoogle Gemini · Platform ComponentUnited States
- PPendo · Product Heat MappingUnited States
- AAmazon · Sending emails regarding triggered workflowsUnited States
- SSendGrid · Email ServiceUnited States
Compliance leadership
The person who leads Black Kite's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Black Kite's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Ongoing UpdatesDec 2024
From now on, Black Kite customers will have the ability to subscribe to our trust page and receive updates regarding Black Kite's security and compliance.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Black Kite SOC 2 compliant?
Black Kite is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Black Kite GDPR compliant?
According to Black Kite's public trust center, Black Kite is GDPR compliant. On SOC2C this listing is Listed.
Is Black Kite ISO 27001 certified?
According to Black Kite's public trust center, Black Kite is ISO 27001 certified. On SOC2C this listing is Listed.
Is Black Kite CSA STAR certified?
According to Black Kite's public trust center, Black Kite is CSA STAR certified. On SOC2C this listing is Listed.
Is Black Kite SOC 2 Type I or Type II?
Black Kite is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Black Kite's SOC 2 for a vendor risk assessment?
Yes. Black Kite's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Black Kite penetration tested?
Black Kite hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Black Kite secure?
Security isn't a single yes/no, but Black Kite is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, ISO 27001, CSA STAR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Black Kite have a bug bounty or vulnerability disclosure program?
Black Kite hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@blackkite.com or via a /security page (Black Kite lists a security contact).
Who are Black Kite's subprocessors?
Black Kite lists 5 subprocessors on its trust center, including Google Cloud Platform, Google Gemini, Pendo, Amazon, SendGrid. Buyers use this for fourth-party risk review.
Where does Black Kite host or store data?
Black Kite hosts on GCP, and handles Customer personally identifiable information. Data residency details are on its trust center.
Where is Black Kite's trust center or security page?
Black Kite's trust center is at https://trust.blackkite.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Black Kite
Reproduced from Black Kite's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
How does Black Kite gather data on my third parties?
Black Kite uses open source intelligence methods to gather data. This is accomplished using web crawlers and a variety of information feeds such as social media and dark-web forums.
What forms of personal data will Black Kite handle?
Because Black Kite uses public data to perform its service, it does not require any sensitive personal data from users. Users of the platform will need to provide a functional business email address to create an account. Additionally, users may sign up using their full name, or an alias if they would prefer.
How does Black Kite define Customer Data?
"Customer data" refers to any documents, files, or information uploaded to our platform by a customer for analysis or processing. This includes materials originating directly from the customer as well as documents they may have received from their own customers and subsequently uploaded to our platform. Such data is considered proprietary to the customer and is handled in accordance with our data privacy and security policies.
Do you train any models using my data?
As described in our Core AI Tenets, Black Kite never uses customer data to train any public or private models.
How does BK utilize AI within their platform?
Two ways: 1. Black Kite is revolutionizing OSINT data extraction with advanced AI and large language models (LLMs), enabling faster, more precise analysis. 2. With the upcoming update to our UniQuE Parser, we’re introducing a smarter, faster, and more efficient way to assess compliance documentation—without compromising your data privacy. For these solutions, Black Kite use Google Cloud Platform’s Vertex AI platform that includes the Gemini AI model.
Can customers opt out of using AI-driven features?
Yes, Black Kite provides customers with the flexibility to decide whether to use AI-driven features. Customers can enable or disable AI-powered functionalities as needed to suit their preferences and compliance requirements.
How does Black Kite mitigate risks associated with AI bias?
Black Kite chose to use a commercial off-the-shelf AI solution that has robust Responsible AI guidelines.. Moreover Black Kite’s use of AI pertains to cybersecurity recommendations and decision augmentation which is not typically affiliated with AI bias topics.
How does Black Kite mitigate risks associated with AI governance and security?
Black Kite chose to use a commercial off-the-shelf AI solution that has robust governance and security guidelines. Moreover, Black Kite has established an internal AI governance committee who oversees risk associated with AI within Black Kite.
Do you use Generative AI in your platform?
Yes, Black Kite leverages generative AI in specific areas to enhance our platform's capabilities. Generative AI is used to deliver insights such as data analysis, search and recommendation, and summarization. Importantly, we only use generative AI when directed by the user, ensuring customer control and alignment with our AI tenets.
What specific purposes does Generative AI serve in Black Kite’s platform?
Generative AI in Black Kite is utilized for: - Data Analysis: To uncover insights and relationships in data, such as detecting anomalies in cybersecurity logs or proposing remediation actions. - Analyze and Recommend: To analyze and recommend useful content, such as identifying regulations related to specific cybersecurity topics. - Summarization: To generate concise summaries of reports, frameworks, and other documents to help users identify key insights quickly. - Compliance mapping: Find the relevant evidence in compliance documents to map it to a set controls in regulatory frameworks and decide whether the controls are met or not
Does Black Kite share customer data with AI systems for training purposes?
No, Black Kite does not share customer data with AI systems for training.
How does Black Kite comply with AI-related legal and regulatory requirements??
Black Kite adheres to all applicable laws and regulations governing AI development and deployment. We ensure transparency about our AI capabilities, mitigate biases, and uphold high standards for data governance and privacy. For detailed compliance information, please visit the Resources section in our Trust Center.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public