Question 1

Is codefortynine SOC 2 compliant?

Accepted Answer

codefortynine is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is codefortynine GDPR compliant?

Accepted Answer

According to codefortynine's public trust center, codefortynine is GDPR compliant. On SOC2C this listing is Listed.

Question 3

Is codefortynine SOC 2 Type I or Type II?

Accepted Answer

codefortynine is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use codefortynine's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. codefortynine's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is codefortynine penetration tested?

Accepted Answer

codefortynine hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Can I get codefortynine's SOC 2 report?

Accepted Answer

codefortynine's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 7

Is codefortynine secure?

Accepted Answer

Security isn't a single yes/no, but codefortynine is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does codefortynine have a bug bounty or vulnerability disclosure program?

Accepted Answer

codefortynine hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@codefortynine.com or via a /security page (codefortynine lists a security contact).

Question 9

Who are codefortynine's subprocessors?

Accepted Answer

codefortynine lists 3 subprocessors on its trust center, including Amazon Web Services, Google Workspace, Atlassian Pty Ltd . Buyers use this for fourth-party risk review.

Question 10

Where does codefortynine host or store data?

Accepted Answer

codefortynine hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information. Data residency details are on its trust center.

Question 11

Where is codefortynine's trust center or security page?

Accepted Answer

codefortynine's trust center is at https://trust.codefortynine.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

I found a security bug. Do you have an established bug bounty program?

Accepted Answer

Yes. We are part of a Bugcrowd bug bounty program.

Question 13

Where is your status page located?

Accepted Answer

Our Status Page is located here, providing details and postmortems about any incidents regarding our apps.

Question 14

Where can I access your EULA and DPA?

Accepted Answer

Please find our End User License Agreement here, providing general terms and conditions for using our app licenses, including our Data Processing Addendum.

Question 15

Do you publish a list of security vulnerabilities found in your apps?

Accepted Answer

We provide a list of Security Vulnerabilities found in our bug bounty program, along with their priorities and fixed dates.

Question 16

Where are your servers located?

Accepted Answer

We provide the same data locations as Atlassian (Global, EU, NA). For further information on how to change your data residency, check our documentation.

Question 17

Do you encrypt data at rest?

Accepted Answer

Yes. All data stored in our databases is encrypted at rest by the AWS services we use to store that data.

Question 18

How often do you backup customer data?

Accepted Answer

We back up customer data at least daily and currently every 6 hours.

Question 19

How long do you store backups?

Accepted Answer

We store all backups for 30 days.

codefortynine

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

1099-Prep

Octopus Deploy

Ask Ai