SOC2C

CareMonitor security & compliance

An overview of CareMonitor's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 · Listed
FrameworksISO 27001
Penetration testNot listed
SubprocessorsNot listed
HostingNot listed
Trust centerView

Security questions about CareMonitor

Is CareMonitor secure?
Security isn't a single yes/no, but CareMonitor is SOC 2 compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does CareMonitor have a bug bounty or vulnerability disclosure program?
CareMonitor hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@caremonitor.com.au or via a /security page.
Who are CareMonitor's subprocessors?
CareMonitor's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does CareMonitor host or store data?
CareMonitor's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is CareMonitor's trust center or security page?
CareMonitor's trust center is at https://trust.caremonitor.com.au. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See CareMonitor's full SOC 2 profile →