Question 1

Is Canyon GBS SOC 2 compliant?

Accepted Answer

Canyon GBS is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Canyon GBS ISO 27001 certified?

Accepted Answer

According to Canyon GBS's public trust center, Canyon GBS is ISO 27001 certified. On SOC2C this listing is Listed.

Question 3

Is Canyon GBS ISO 42001 certified?

Accepted Answer

According to Canyon GBS's public trust center, Canyon GBS is ISO 42001 certified. On SOC2C this listing is Listed.

Question 4

Is Canyon GBS HIPAA compliant?

Accepted Answer

According to Canyon GBS's public trust center, Canyon GBS is HIPAA compliant. On SOC2C this listing is Listed.

Question 5

Is Canyon GBS SOC 2 Type I or Type II?

Accepted Answer

Canyon GBS is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 6

Can I use Canyon GBS's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Canyon GBS's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 7

Is Canyon GBS penetration tested?

Accepted Answer

Canyon GBS hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 8

Is Canyon GBS secure?

Accepted Answer

Security isn't a single yes/no, but Canyon GBS is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 42001, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 9

Does Canyon GBS have a bug bounty or vulnerability disclosure program?

Accepted Answer

Canyon GBS hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@canyongbs.com or via a /security page.

Question 10

Who are Canyon GBS's subprocessors?

Accepted Answer

Canyon GBS's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

Question 11

Where does Canyon GBS host or store data?

Accepted Answer

Canyon GBS's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Question 12

Where is Canyon GBS's trust center or security page?

Accepted Answer

Canyon GBS's trust center is at https://canyongbs.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Canyon GBS

About

Compliance & infrastructure

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Education peers that completed SOC 2

Mentor Collective

Go1

Apperson Inc

Mgkusumaputra