SOC2C

Certrec SaaS security & compliance

An overview of Certrec SaaS's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II
Penetration testNot listed
SubprocessorsNot listed
HostingNot listed
Trust centerView

Security questions about Certrec SaaS

Is Certrec SaaS secure?
Security isn't a single yes/no, but Certrec SaaS is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Certrec SaaS have a bug bounty or vulnerability disclosure program?
Certrec SaaS hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@certrecsaas.com or via a /security page.
Who are Certrec SaaS's subprocessors?
Certrec SaaS's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Certrec SaaS host or store data?
Certrec SaaS's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Certrec SaaS's trust center or security page?
Certrec SaaS's trust center is at https://certrecsaas.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Certrec SaaS's full SOC 2 profile →