Can I use BTS's SOC 2 for a vendor risk assessment?

Yes. BTS's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Is BTS penetration tested?

BTS hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Can I get BTS's SOC 2 report?

BTS's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Does BTS have an ISO 27001 certificate?

BTS publishes an ISO certificate on its trust center; you can request access through SOC2C.

Security isn't a single yes/no, but BTS is SOC 2 compliant and holds ISO 27001, ISO 27701, GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Does BTS have a bug bounty or vulnerability disclosure program?

BTS hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@bts.com or via a /security page (BTS lists a security contact).

Who are BTS's subprocessors?

BTS lists 41 subprocessors on its trust center, including Amazon Web Services, Microsoft Corporation, Box.com, Salesforce, Qualtrics. Buyers use this for fourth-party risk review.

Where does BTS host or store data?

BTS hosts on AWS, GCP, Azure, and handles Employee personally identifiable information. Data residency details are on its trust center.

Where is BTS's trust center or security page?

BTS's trust center is at https://trust.bts.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Is this your company? Buyers are checking BTS here. Claim bts.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free

BTS

bts.com · European Union· 201–1000 employees· Security contact

Security overview Compliance Penetration test

Trust level

Listed

Unverified

Listed

Domain

Report

Live

Sourced from public information. Not yet verified by the company.

BTS is SOC 2 compliant. BTS also holds ISO 27001, ISO 27701, GDPR, and CCPA.

Request report access Claim this profile

Framework

SOC 2

Auditor

Not publicAdd

Last report

—Add

Renewal

UnknownAdd

View official trust center ↗

About

Security is built into the fabric of our products, team, infrastructure, and processes, so you can rest assured your data is safeguarded.

Compliance & infrastructure

ISO 27001ISO 27701GDPRCCPA

Hosting

AWSGCPAzure

Data handled

Employee personally identifiable information

Documents

Subprocessors

A
Amazon Web Services · IaaS Cloud Hosting
EU, US, APAC, Brazil, South Africa
M
Microsoft Corporation · Mirror / Backup site for Coach Platform; Verity
EU (Netherlands)
B
Box.com · Document Collaboration
US
S
Salesforce · CRM / Scheduling
US
Q
Qualtrics · 360 Assessment Platform hosted by third party
EU, US, Canada
H
Hogan Assessments · Provision of Assessment Services
US
H
Halo Feedback (360) · Provision of Assessment Services
US, UK, Australia
G
Gallup · Provision of self-assessment and Reporting
US
S
Smartsheet · Resource management tool used in some cases to store PII
US
Z
Zoom · Provision of online video calling services.
US
F
Fresh Service · Provision of help desk and ticketing solutions.
US
C
CVENT · Provision of Surveys
US

Show all 41 subprocessors

T
The Information Lab · Consulting support on Tableau to provide visualisation of client data for report
UK
W
Wolfpack Digital · Provide third party development support for Coach Platform.
EU
L
Leap9 · Provision of online training content and service.
US, EU (Germany)
V
Verity · Practice and perfect conversations with realistic AI-driven simulations.
Germany
S
Snowflake · Data storage and processing
EU
d
dbt · Data Transformation
EU
A
Airbyte · ETL
EU
G
Google Cloud Platform · Storing data and hosting BTS Coach Services.
Germany, US
D
Deepgram · Transcribing sales recordings and user voice to text.
US
H
Heroku · Providing infrastructure and database for the BTS services.
US
S
Sendgrid · Sending personalised transactional and marketing emails.
US
A
Assembly AI · Transcribing sales recordings and user voice to text.
US
I
Intercom (Vertiy) · Offering customer support through live chat functionality and presenting users w
US
H
Hotjar · Analysing behavioral patterns and improve the user experience and trouble shoot
Malta
R
Recall · Integration with video conferencing platforms (Conversation Analytics product on
US
S
Sounding Board · Coaching and Mentoring Software
US
C
Cyrus One (Co-location DC · Co-location data centre - US
Norwalk, Connecticut
E
Equinix (Co-location Data Centre) · Co-location date centre - EU
Skondal, Stockholm, Sweden
S
Snowflake Inc · Used as a data warehouse. Data with analytical value is copied from the data lak
EU
D
DBT Labs, Inc · Used with Snowflake for Data Transformation.
EU
A
Airbyte Inc. · ETL used to connect BTS Digital platforms with Snowflake hosted in Azure Data La
EU
S
Sendgrid (Verity) · Sending personalised transactional and marketing emails.
US
H
Hubspot · Storing contact information to keep track of customer communication.
V
Virtual Sapiens · As assessment tool to monitor and assess live video interactions of participants
H
Hyperdoc Inc · Verity - Integration with video conferencing platforms (Conversation Analytics p
O
Open AI LLC · AI Model to be used for AI based applications
US
A
Assembly AI Inc (Verity) · Generation of transcripts and VTT files of a video file.
E
Eleven Labs · An API AI based application. Provide third party voice generation support for AI
H
HeyGen Technology Inc. (Verity) · An API for AI based applications. Realtime Avatars.
US

Compliance leadership

The person who leads BTS's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. BTS's penetration test vendor isn't listed yet.

Claim this profile to add it.

This listing is partial

7/11 details · 64%

SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

Auditorraises trust
Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
Report dateraises trust
Add your most recent report period so buyers see how current your SOC 2 is.
Renewal date
Add your renewal window so buyers know your coverage is active.
Security controls
Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.

Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is BTS SOC 2 compliant?

BTS is SOC 2 compliant. On SOC2C this listing is Listed.

Is BTS ISO 27001 certified?

According to BTS's public trust center, BTS is ISO 27001 certified. On SOC2C this listing is Listed.

Is BTS ISO 27701 certified?

According to BTS's public trust center, BTS is ISO 27701 certified. On SOC2C this listing is Listed.

Is BTS GDPR compliant?

According to BTS's public trust center, BTS is GDPR compliant. On SOC2C this listing is Listed.

Is BTS CCPA compliant?

According to BTS's public trust center, BTS is CCPA compliant. On SOC2C this listing is Listed.

Show 9 more questions

Business & Industrial peers that completed SOC 2

Compare vs Newsworthy.ai Compare vs Octopus Deploy Compare vs 1099-Prep

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

Octopus Deploy

1099-Prep

Ask Ai