SOC2C

Bloomflow is security & compliance

An overview of Bloomflow is's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 · Listed
FrameworksISO 27001, GDPR, ISO 27701
Penetration testNot listed
Subprocessors5 listed
HostingAWS, Azure
Trust centerView

Security questions about Bloomflow is

Is Bloomflow is secure?
Security isn't a single yes/no, but Bloomflow is is SOC 2 compliant and holds ISO 27001, GDPR, ISO 27701. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Bloomflow is have a bug bounty or vulnerability disclosure program?
Bloomflow is hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@bloomflow.com or via a /security page (Bloomflow is lists a security contact).
Who are Bloomflow is's subprocessors?
Bloomflow is lists 5 subprocessors on its trust center, including Amazon Web Services, Microsoft Azure, OVHCloud, Cloudflare, Mailjet. Buyers use this for fourth-party risk review.
Where does Bloomflow is host or store data?
Bloomflow is hosts on AWS, Azure, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Bloomflow is's trust center or security page?
Bloomflow is's trust center is at https://trust.bloomflow.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Bloomflow is's full SOC 2 profile →