Datadome security & compliance
An overview of Datadome's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, GDPR, CCPA
Penetration testNot listed
Subprocessors8 listed
HostingAWS, GCP
Trust centerView
Security questions about Datadome
- Is Datadome secure?
- Security isn't a single yes/no, but Datadome is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does Datadome have a bug bounty or vulnerability disclosure program?
- Datadome hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@datadome.co or via a /security page (Datadome lists a security contact).
- Who are Datadome's subprocessors?
- Datadome lists 8 subprocessors on its trust center, including Amazon Web Services, Google, OVH EUROPE, SCALEWAY (Online), Auth0. Buyers use this for fourth-party risk review.
- Where does Datadome host or store data?
- Datadome hosts on AWS, GCP, and handles Customer personally identifiable information used to connect to the DataDome dashboard, HTTP Traffic fingerprints from visitors on customers websites. Data residency details are on its trust center.
- Where is Datadome's trust center or security page?
- Datadome's trust center is at https://trust.datadome.co. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.