Is this your company? Buyers are checking Crystalknows Inc here. Claim crystalknows.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Crystalknows Inc
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Crystalknows Inc is SOC 2 Type II compliant.
About
Crystal gives sales leaders a turnkey solution to implement, scale, and reinforce adaptive selling practices across the entire sales organization, with the DISC framework at its core
Compliance & infrastructure
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Documents
6Compliance leadership
The person who leads Crystalknows Inc's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Crystalknows Inc's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
4/11 details · 36%SOC2C shows the verified essentials. 7 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- SubprocessorsList your subprocessors so buyers can assess fourth-party risk, the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Crystalknows Inc SOC 2 compliant?
Crystalknows Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Crystalknows Inc SOC 2 Type I or Type II?
Crystalknows Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Crystalknows Inc's SOC 2 for a vendor risk assessment?
Yes. Crystalknows Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Crystalknows Inc penetration tested?
Yes — Crystalknows Inc undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Can I get Crystalknows Inc's SOC 2 report?
Crystalknows Inc's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Does Crystalknows Inc have a penetration test report?
Crystalknows Inc publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Is Crystalknows Inc secure?
Security isn't a single yes/no, but Crystalknows Inc is SOC 2 Type II compliant, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Crystalknows Inc have a bug bounty or vulnerability disclosure program?
Crystalknows Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@crystalknows.com or via a /security page (Crystalknows Inc lists a security contact).
Who are Crystalknows Inc's subprocessors?
Crystalknows Inc's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Crystalknows Inc host or store data?
Crystalknows Inc's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Crystalknows Inc's trust center or security page?
Crystalknows Inc's trust center is at https://trust.crystalknows.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Crystalknows Inc
Reproduced from Crystalknows Inc's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
How does Crystal generate personality profiles?
https://www.crystalknows.com/how-predictions-work Crystal uses a predictive model to predict someone's DISC type, based on publicly available information like job titles, skills, interests, bio/summaries, companies, etc. Our predictive model is trained on large set of anonymized DISC assessment data, allowing us to make a statistically-informed "best guess" about a person's DISC type when they have not taken an assessment. Crystal's predictions are primarily generated from our Chrome Extension, using data strictly in the front end web browser. We also use several fully compliant back end services to aggregate more data points and analyze them for a more accurate DISC profile.
What kind of data do we collect?
Crystal analyzes publicly available data such as Name, Job Title, Skills, Industries, Interests, Companies (employers), Bio/summary text. If necessary, Crystal will save the following data points: Name, Company (for identification), LinkedIn URL (for caching/performance), Predicted DISC type (analyzed results). https://www.crystalknows.com/privacy
Can subscribers and analyzed individuals opt out?
For subscribers, in their personal settings, users can choose to make their results public, private or delete them altogether. For analyzed individuals, it’s important to note that Crystal is only processing data provided by the user or on public web pages. When a Crystal user generates a predicted profile (for an analyzed person), that user has complete control over the profile, including the ability to fully delete it from Crystal’s database in order to comply with any opt-outs, requests, or other internal policies.
Is Crystal in compliance with GDPR, specifically Article 14?
Yes, Crystal is and has been compliant with GDPR since the law went into effect. https://www.crystalknows.com/gdpr As a user or data subject, you may request that we confirm whether or not we are processing your Personal Data, and you may request access at any time to your Personal Data over which we have control. You may also request information about our processing of Personal Data, including the type of Personal Data processed and the reasons for such processing. You may request that we change, alter, amend, or update your Personal Data and you may request that we refrain from processing certain information if it is inaccurate or unlawfully held. You may request a copy of your Personal Data for transfer to another entity. You may also, at any time, request that we delete or erase your Personal Data, unless we are required by applicable law to retain such information or have other legitimate grounds for continuing to process your Personal Data. You may also object at any time to our use of your Personal Data to provide direct marketing.
Does Crystal have a DPA?
We do! you can find it at: https://www.crystalknows.com/dpa
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public