Is this your company? Buyers are checking Dovetailed Technologies LLC here. Claim dovetail.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Dovetailed Technologies LLC
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Dovetailed Technologies LLC is SOC 2 Type II compliant. Dovetailed Technologies LLC also holds ISO 27001, ISO 42001, and HIPAA.
About
Security, reliability, privacy, and compliance are at the heart of everything we do at Dovetail. Ensuring the safety and privacy of your data is baked into everyday processes throughout our organization. We take regular data backups and test recovery, run penetration testing, encrypt all data at rest and in transit, conduct static code analysis and third party vulnerability scanning, sanitize our logs, secure individual customers at the database level, and implement many other cloud security techniques. Explore our Trust Center for more information, real-time monitoring, and supporting documen
Compliance & infrastructure
Hosting
AWSGCP
Documents
3Subprocessors
19- AAmazon Web Services · Infrastructure provider for the Dovetail ApplicationUSA, Ireland, Germany, France, Australia
- OOkta, Inc. (Auth0) · Identity providerUSA
- AAssemblyAI · Video transcriptionUSA, Ireland
- GGoogle Cloud Platform · Infrastructure provider used for Dovetail's AI featuresAustralia, USA, EU
- AAnthropic · AI ProviderUSA
- RRev · Video transcription for some languagesUSA, Germany
- SStripe · Payment processor for billingUSA
- SSegment · Usage trackingUSA
- FFullstory · Usage analytics and tracking for free workspaces onlyUSA
- SSentry · Error trackingUSA
- DDatadog · Error tracking, application logging and platform observabilityUSA
- DDelighted · Used for NPS surveysUSA
Show all 19 subprocessorsShow fewer
- LLinear · Ticket tracking for support and engineering teamsUSA
- FFivetran · Reverse ETL vendor for syncing data from data warehouse to third-party toolsUSA
- IIntercom · Customer support requestsUSA
- HHubSpot · Outbound marketing email automationUSA
- SSalesforce · Customer relation management (CRM)USA
- PPocus · Data analysis that tracks product usage to help improve our servicesUSA
- SSnowflake · Account Data and Usage DataUSA
Compliance leadership
The person who leads Dovetailed Technologies LLC's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Dovetailed Technologies LLC's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Data Subprocessor changeAug 2025
This is a notification of a change to our list of Subprocessors. We have added Snowflake.
Update to our AI modelsAug 2025
We have updated our AI models to reflect current usage within Dovetail's products. Please see this for more details.
Data Subprocessor changeJun 2025
This is a notification of a change to our list of Subprocessors. In the coming months, Dovetail will begin to use Anthropic and GCP to enhance some of Dovetail AI and beta features.
Data subprocessor changeJan 2025
This is a notification of a change to our list of Subprocessors. We have added the following: * Okta, Inc. (Auth0), which will be used as our identity provider for the Dovetail product within the next three months. * Cronofy, which is being used to manage calendar integrations for Dovetail Recruit (currently in closed beta). * AssemblyAI, which is being used for transcription services. Dovetail customers can opt into this starting today; migration of existing workspaces will begin to use AssemblyAI within 14 days.
Data subprocessor changeDec 2024
As part of Dovetail's "Open By Default" value (and to comply with any contractual requirements), we are notifying you of a change to our list of Subprocessors. For transparency, we have expanded the list to include third parties that may not technically fall under the definition of a "Subprocessor," but we think it is important for you to be aware of them.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Dovetailed Technologies LLC SOC 2 compliant?
Dovetailed Technologies LLC is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Dovetailed Technologies LLC ISO 27001 certified?
According to Dovetailed Technologies LLC's public trust center, Dovetailed Technologies LLC is ISO 27001 certified. On SOC2C this listing is Listed.
Is Dovetailed Technologies LLC ISO 42001 certified?
According to Dovetailed Technologies LLC's public trust center, Dovetailed Technologies LLC is ISO 42001 certified. On SOC2C this listing is Listed.
Is Dovetailed Technologies LLC HIPAA compliant?
According to Dovetailed Technologies LLC's public trust center, Dovetailed Technologies LLC is HIPAA compliant. On SOC2C this listing is Listed.
Is Dovetailed Technologies LLC SOC 2 Type I or Type II?
Dovetailed Technologies LLC is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Dovetailed Technologies LLC's SOC 2 for a vendor risk assessment?
Yes. Dovetailed Technologies LLC's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Dovetailed Technologies LLC penetration tested?
Dovetailed Technologies LLC hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get Dovetailed Technologies LLC's SOC 2 report?
Dovetailed Technologies LLC's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is Dovetailed Technologies LLC secure?
Security isn't a single yes/no, but Dovetailed Technologies LLC is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 42001, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Dovetailed Technologies LLC have a bug bounty or vulnerability disclosure program?
Dovetailed Technologies LLC hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@dovetail.com or via a /security page (Dovetailed Technologies LLC lists a security contact).
Who are Dovetailed Technologies LLC's subprocessors?
Dovetailed Technologies LLC lists 19 subprocessors on its trust center, including Amazon Web Services, Okta, Inc. (Auth0), AssemblyAI, Google Cloud Platform, Anthropic. Buyers use this for fourth-party risk review.
Where does Dovetailed Technologies LLC host or store data?
Dovetailed Technologies LLC hosts on AWS, GCP. Data residency details are on its trust center.
Where is Dovetailed Technologies LLC's trust center or security page?
Dovetailed Technologies LLC's trust center is at https://trust.dovetail.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
What data does Dovetail store?
When provisioning a user account, users must provide personal information such as their email address, full name, and profile photo (optional). While using the services, authorized users can upload, import via CSV or Zapier, or directly enter any data such as text, images, audio, video, or any other files. To best understand the data that you expect to store in Dovetail, we recommend talking to the individuals and end-users who will be using Dovetail. Most Dovetail customers will store research data such as interview recordings, transcripts, survey responses, customer feedback, photographs, and other research data. The data that you enter into Dovetail may vary depending on the use cases of your individual end-users. The "Data Privacy and Dovetail" white paper provides additional information, use cases, etc.
What AI models are used?
##### Anthropic | Acceptable Use Policy * Claude Sonnet 4.0 * Claude Sonnet 4.5 * Claude Sonnet 4.6 * Claude Haiku 3.5 * Claude Haiku 4.5 * Claude Opus 4.1 * Claude Opus 4.6 * Claude Opus 4.8 ##### Amazon | Acceptable Use Policy * Nova Lite ##### Cohere | Acceptable Use Policy * Embed Multilingual v3 * Rerank 3.5 ##### Google | Acceptable Use Policy * Gemini 2.5 Flash
Where is data stored?
We store data in Amazon Web Services (AWS) as our primary infrastructure provider. When creating a workspace in Dovetail, you can choose to store the data you upload to that workspace in the United States, Europe, or Australia. - United States: your workspace data will be stored in us-east-1 (North Virginia) or us-east-2 (Ohio). - Europe: your workspace data will be stored in eu-west-1 (Ireland). - Australia: your workspace data will be stored in ap-southeast-2 (Sydney). Notwithstanding the selection you make regarding your workspace data, other categories of data (such as product analytics data, account billing and contact data, workspace URLs, access and operational logs, and support-related data) will continue to be transferred to, and stored in, the United States. Additionally, where your workspace data is processed by one of our sub-processors, this data may continue to be processed outside the region you select, depending on the location of the relevant sub-processor.
Does Dovetail fill out security assessments?
We understand that many organizations have vendor risk management processes in place, and we want to be transparent in how we operate, secure, and manage our services at Dovetail. This is why we have published detailed information on topics such as product security features, infrastructure and network security, data security and privacy, business continuity and disaster recovery, corporate security, compliance, and more. We have provided this information to assist organizations in conducting their own due diligence on the security and operation of the Dovetail service, without delay or the need for your teams to work through our lengthy questionnaire responses. ##### Standardized Questionnaires To help with your processes, we have completed the following standard vendor self-assessment questionnaire formats and made them available to download in the Resources tab: - Cloud Security Alliance (CSA) Consensus Assessments Initiative Questionnaire (CAIQ v3.1) - Vendor Security Alliance questionnaire (VSA-Core 2022) ##### Custom Questionnaires If your organization has non-standard, bespoke requirements or custom questionnaires that you want us to complete, please raise this with Sales or, for existing customers, your Customer Success representative.
Where can I find Dovetail's DPA?
Our DPA is available to review in the Resources tab. To enter into the DPA, follow this link, provide the requested information (e.g., notification details), and submit the DPA for completion.
How is data encrypted?
Dovetail utilizes industry-standard practices concerning the encryption of data when stored and while in transmission. Dovetail also have a documented cryptography policy that outlines the requirements for encrypting data and transmissions. ##### Encryption at Rest All data, including backups, is encrypted at-rest using AES-256 encryption. ##### Encryption in Transit Data is encrypted while moving between us and the browser with Transport Level Security (TLS) 1.3. ##### Secure Sockets Layer Secure Sockets Layer (SSL) certificates are issued and managed through Amazon Web Services, and HTTP Strict Transport Security (HSTS) is enabled. We score an A+ rating on Qualys SSL Labs tests. ##### Key Management Amazon Web Services (AWS) stores and manages data cryptography keys in its redundant and globally distributed Key Management Service (KMS). AWS KMS is a secure and resilient service that uses hardware security modules that have been validated under FIPS 140-2, or are in the process of being validated, to protect your keys.
Is Single Sign-On (SSO) supported?
Dovetail has built-in Single Sign-On (SSO) capabilities for Google and Microsoft accounts, and the option to configure your own managed identity provider as a single sign-on authentication option for Dovetail enterprise workspaces. More information on SSO capabilities can be found here.
How long does Dovetail retain a customer's data?
Customer data is always under the control of customers, and can be amended or deleted directly by the customer as they may require. Dovetail backs up all customer data within AWS, using a cyclic backup spanning 30 days: if data is deleted by the customer within Dovetail, it will persist in backups for up to 30 additional days. Customers terminating their Dovetail service are given a 30-day window in which they can manage download of any data they’d like to export from the Dovetail service. After that, the data will be deleted (and, because of backups, will be retained there for up to 30 additional days). Customers on the Enterprise service tier have the ability to set data retention schedules, e.g., to have any videos uploaded to a project automatically deleted after one year.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public