Question 1

Is Data rooms SOC 2 compliant?

Accepted Answer

Data rooms is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Data rooms ISO 27001 certified?

Accepted Answer

According to Data rooms's public trust center, Data rooms is ISO 27001 certified. On SOC2C this listing is Listed.

Question 3

Is Data rooms HIPAA compliant?

Accepted Answer

According to Data rooms's public trust center, Data rooms is HIPAA compliant. On SOC2C this listing is Listed.

Question 4

Is Data rooms GDPR compliant?

Accepted Answer

According to Data rooms's public trust center, Data rooms is GDPR compliant. On SOC2C this listing is Listed.

Question 5

Is Data rooms SOC 2 Type I or Type II?

Accepted Answer

Data rooms is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 6

Can I use Data rooms's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Data rooms's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 7

Is Data rooms penetration tested?

Accepted Answer

Data rooms hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 8

Is Data rooms secure?

Accepted Answer

Security isn't a single yes/no, but Data rooms is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, HIPAA, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 9

Does Data rooms have a bug bounty or vulnerability disclosure program?

Accepted Answer

Data rooms hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@data-room-software.org or via a /security page.

Question 10

Who are Data rooms's subprocessors?

Accepted Answer

Data rooms's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

Question 11

Where does Data rooms host or store data?

Accepted Answer

Data rooms's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Question 12

Where is Data rooms's trust center or security page?

Accepted Answer

Data rooms's trust center is at https://data-room-software.org. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Data rooms

About

Compliance & infrastructure

Compliance leadership

Penetration test

This listing is partial

Frequently asked