Is this your company? Buyers are checking CaptivateIQ here. Claim captivateiq.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
CaptivateIQ
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
CaptivateIQ is SOC 2 Type II compliant.
About
CaptivateIQ is a software solution that calculates and reports sales commissions for your sales teams. We are committed to achieving and maintaining the trust of our customers. We take trust very seriously and have systems and procedures in place to protect access to your account and the data you store in CaptivateIQ. This Trust report provides an overview of data security practices and procedures in place
Compliance & infrastructure
Hosting
AWS
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Documents
14Documents
- Code of Ethics and Conduct for External StakeholdersPublic
- 2026 SOC 1 Type II ReportRequest
- 2026 SOC 2 Type II ReportRequest
- Security WhitepaperRequest
- Privacy & Data Security OverviewRequest
- VSA Core QuestionnaireRequest
- SIG Lite Extended QuestionnaireRequest
- CaptivateIQ Assist Security Whitepaper.pdfRequest
- Certificate of InsuranceRequest
- Penetration Test & Response ReportRequest
QUESTIONNAIRES
Subprocessors
13- AAmazon Web Services · Web Hosting ServicesUnited States
- CCloudflare · Content Distribution NetworkUnited States
- DDatadog · Cloud service monitoringUnited States
- GGong · Call meeting and Notes historyUnited States
- GGoogle Workspace · Web Hosting ProviderUnited States
- SSalesforce · Customer Relationship ManagementUnited States
- SSegment · Product AnalyticsUnited States
- SSentry · Application Error Tracking and MonitoringUnited States
- CChurnZero · Cloud Based Customer supportUnited States
- SSnowflake · Data storageUnited States
- WWorkato · Data IntergrationUnited States
- ZZendesk - SAML SCIM · Cloud Based Customer supportUnited States
Show all 13 subprocessorsShow fewer
- OOrca Security · Cloud Security Posture ManagementUnited States
Compliance leadership
The person who leads CaptivateIQ's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. CaptivateIQ's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is CaptivateIQ SOC 2 compliant?
CaptivateIQ is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is CaptivateIQ SOC 2 Type I or Type II?
CaptivateIQ is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use CaptivateIQ's SOC 2 for a vendor risk assessment?
Yes. CaptivateIQ's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is CaptivateIQ penetration tested?
CaptivateIQ hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get CaptivateIQ's SOC 2 report?
CaptivateIQ's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is CaptivateIQ secure?
Security isn't a single yes/no, but CaptivateIQ is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does CaptivateIQ have a bug bounty or vulnerability disclosure program?
CaptivateIQ hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@captivateiq.com or via a /security page (CaptivateIQ lists a security contact).
Who are CaptivateIQ's subprocessors?
CaptivateIQ lists 13 subprocessors on its trust center, including Amazon Web Services, Cloudflare, Datadog, Gong, Google Workspace. Buyers use this for fourth-party risk review.
Where does CaptivateIQ host or store data?
CaptivateIQ hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is CaptivateIQ's trust center or security page?
CaptivateIQ's trust center is at https://trust.captivateiq.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Do you have a privacy policy?
Yes, it can be viewed at Privacy Policy
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public