dotCMS Services LLC security & compliance
An overview of dotCMS Services LLC's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, ISO 27001
Penetration testNot listed
Subprocessors5 listed
HostingAWS, GCP
Trust centerView
Security questions about dotCMS Services LLC
- Is dotCMS Services LLC secure?
- Security isn't a single yes/no, but dotCMS Services LLC is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does dotCMS Services LLC have a bug bounty or vulnerability disclosure program?
- dotCMS Services LLC hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@dotcms.com or via a /security page (dotCMS Services LLC lists a security contact).
- Who are dotCMS Services LLC's subprocessors?
- dotCMS Services LLC lists 5 subprocessors on its trust center, including AWS, Google Cloud Platform, Strong DM, Keeper, GitHub. Buyers use this for fourth-party risk review.
- Where does dotCMS Services LLC host or store data?
- dotCMS Services LLC hosts on AWS, GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
- Where is dotCMS Services LLC's trust center or security page?
- dotCMS Services LLC's trust center is at https://security.dotcms.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.