SOC2C

CSO Online security & compliance

An overview of CSO Online's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 · Listed
FrameworksCCPA
Penetration testNot listed
SubprocessorsNot listed
HostingNot listed
Trust centerView

Security questions about CSO Online

Is CSO Online secure?
Security isn't a single yes/no, but CSO Online is SOC 2 compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does CSO Online have a bug bounty or vulnerability disclosure program?
CSO Online hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@csoonline.com or via a /security page.
Who are CSO Online's subprocessors?
CSO Online's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does CSO Online host or store data?
CSO Online's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is CSO Online's trust center or security page?
CSO Online's trust center is at https://csoonline.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See CSO Online's full SOC 2 profile →