Is this your company? Buyers are checking Doctrine here. Claim doctrine.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Doctrine
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Doctrine is SOC 2 compliant. Doctrine also holds GDPR, and ISO 27001.
About
Welcome to Doctrine's Trust Center, an overview of our commitment to security.
Compliance & infrastructure
Hosting
AWSGCPAzure
Documents
5Subprocessors
10- AAmazon Web Services · awsGermany
- AAuth0Europe
- GGoogle CloudEurope
- AAzure · Cloud providerEurope
- IIntercomUnited States
- DDatadog · datadogUnited States
- EEsendexUnited Kingdom
- SSnowflakeEurope
- MMixpanelUnited States
- FFullstoryUnited States
Compliance leadership
The person who leads Doctrine's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Doctrine's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Doctrine SOC 2 compliant?
Doctrine is SOC 2 compliant. On SOC2C this listing is Listed.
Is Doctrine GDPR compliant?
According to Doctrine's public trust center, Doctrine is GDPR compliant. On SOC2C this listing is Listed.
Is Doctrine ISO 27001 certified?
According to Doctrine's public trust center, Doctrine is ISO 27001 certified. On SOC2C this listing is Listed.
Can I use Doctrine's SOC 2 for a vendor risk assessment?
Yes. Doctrine's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Doctrine penetration tested?
Yes — Doctrine undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Does Doctrine have a penetration test report?
Doctrine publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Is Doctrine secure?
Security isn't a single yes/no, but Doctrine is SOC 2 compliant and holds GDPR, ISO 27001, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Doctrine have a bug bounty or vulnerability disclosure program?
Doctrine hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@doctrine.com or via a /security page (Doctrine lists a security contact).
Who are Doctrine's subprocessors?
Doctrine lists 10 subprocessors on its trust center, including Amazon Web Services, Auth0, Google Cloud, Azure, Intercom . Buyers use this for fourth-party risk review.
Where does Doctrine host or store data?
Doctrine hosts on AWS, GCP, Azure. Data residency details are on its trust center.
Where is Doctrine's trust center or security page?
Doctrine's trust center is at https://trust.doctrine.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Doctrine
Reproduced from Doctrine's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
Where are your servers located?
Our servers are secured and hosted in the European Union, in Frankfurt. Our AWS provider meets the highest physical and software security standards and is certified ISO/IEC 27001:2013, 27017:2015, 27018:2019 and 9001:2015.
How do you authenticate?
Users log in to their account with a login (email) and password that meet strict criteria, in compliance with CNIL and ANSSI requirements. In addition, MFA or SSO login can be implemented on request at no extra cost. We use an authentication provider, Auth0. Authentication data is encrypted: your data is encrypted in transit via TLS 1.2 and at rest via AES 256. For password hashing, Auth0 uses a bcrypt password hashing algorithm with a salt of 128 bits and 10 rounds.
Is your data secure?
Yes, at Doctrine we attach great importance to data security and confidentiality. We use the HTTPS protocol with TLS 1.2: all your searches are encrypted before being transmitted to our servers so that no one can intercept them. We use the industry-standard AES 256 encryption algorithm. Your login credentials are highly secure (we use the bcrypt encryption algorithm). In addition, we have put in place internal technical and organizational measures to ensure the security and confidentiality of your data. In particular, we segment access to data according to roles and favor the use of pseudonyms: only people with a legitimate reason can access the personal data we hold. We also minimize the data we send to our various service providers so that we only send them the data that is really necessary for their activity. The same security measures apply to documents that you send us for analysis in the Document Analyzer, Flow and Extract. You will find further information: https://www.doctrine.fr/document-analyzer/faq https://www.doctrine.fr/flow/faq
What are your other commitments?
You will find our commitments in our general code of conduct: https://www.doctrine.fr/pdf/code_de_bonne_conduite.pdf and in our GenIA code of conduct: https://www.doctrine.fr/ia-generative/code-conduite-ia.