Question 1

Is Century SOC 2 compliant?

Accepted Answer

Century is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Century HIPAA compliant?

Accepted Answer

According to Century's public trust center, Century is HIPAA compliant. On SOC2C this listing is Listed.

Question 3

Is Century SOC 2 Type I or Type II?

Accepted Answer

Century is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use Century's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Century's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is Century penetration tested?

Accepted Answer

Century hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Can I get Century's SOC 2 report?

Accepted Answer

Century's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 7

Is Century secure?

Accepted Answer

Security isn't a single yes/no, but Century is SOC 2 Type II compliant and holds HIPAA, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does Century have a bug bounty or vulnerability disclosure program?

Accepted Answer

Century hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@century.health or via a /security page (Century lists a security contact).

Question 9

Who are Century's subprocessors?

Accepted Answer

Century's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

Question 10

Where does Century host or store data?

Accepted Answer

Century's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Question 11

Where is Century's trust center or security page?

Accepted Answer

Century's trust center is at https://trust.century.health. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Century

About

Compliance & infrastructure

Documents

Compliance leadership

Penetration test

This listing is partial

Frequently asked