Is this your company? Buyers are checking Dreamdata here. Claim dreamdata.io free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Dreamdata
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Dreamdata is SOC 2 Type II compliant. Dreamdata also holds SOC 3, CSA STAR, GDPR, CCPA, and NIST CSF.
About
Welcome to Dreamdata's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. This portal allows you to learn about our security posture and request access to our security documentation.
Compliance & infrastructure
Hosting
GCP
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Documents
1Documents
Subprocessors
4- GGoogle Cloud Platform · Cloud providerEuropean Union
- CCluvio · Data analyticsEuropean Union
- SSFTPgo · SFTP Server HostingEuropean Union
- FFiveTran · Data integration and pipeline automationUnited States
Compliance leadership
The person who leads Dreamdata's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Dreamdata's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
2026 SOC 2 Type 2 & SOC 3 ReportsMay 2026
Dreamdata.io ApS has successfully achieved SOC 2 Compliance for the 4th year in a row. This achievement further proves our commitment to protecting our customers and building further trust in our relationship. Please login to our Trust Center to download our updated 2026 SOC 2 Type 2 Report. New this year, we've also published our 2026 SOC 3 Report — a publicly shareable summary of the same examination — available alongside it. If there is anything Information Security related that you would like to discuss, please contact us through the portal.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Dreamdata SOC 2 compliant?
Dreamdata is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Dreamdata SOC 3 compliant?
According to Dreamdata's public trust center, Dreamdata is SOC 3 compliant. On SOC2C this listing is Listed.
Is Dreamdata CSA STAR certified?
According to Dreamdata's public trust center, Dreamdata is CSA STAR certified. On SOC2C this listing is Listed.
Is Dreamdata GDPR compliant?
According to Dreamdata's public trust center, Dreamdata is GDPR compliant. On SOC2C this listing is Listed.
Is Dreamdata CCPA compliant?
According to Dreamdata's public trust center, Dreamdata is CCPA compliant. On SOC2C this listing is Listed.
Is Dreamdata NIST CSF compliant?
According to Dreamdata's public trust center, Dreamdata is NIST CSF compliant. On SOC2C this listing is Listed.
Is Dreamdata SOC 2 Type I or Type II?
Dreamdata is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Dreamdata's SOC 2 for a vendor risk assessment?
Yes. Dreamdata's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Dreamdata penetration tested?
Dreamdata hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Dreamdata secure?
Security isn't a single yes/no, but Dreamdata is SOC 2 Type II compliant and holds SOC 2 Type II, SOC 3, CSA STAR, GDPR, CCPA, NIST CSF. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Dreamdata have a bug bounty or vulnerability disclosure program?
Dreamdata hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@dreamdata.io or via a /security page (Dreamdata lists a security contact).
Who are Dreamdata's subprocessors?
Dreamdata lists 4 subprocessors on its trust center, including Google Cloud Platform, Cluvio, SFTPgo, FiveTran. Buyers use this for fourth-party risk review.
Where does Dreamdata host or store data?
Dreamdata hosts on GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Dreamdata's trust center or security page?
Dreamdata's trust center is at https://trust.dreamdata.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Where are your servers located?
Dreamdata uses Google Cloud datacenters located in the EEA. Specifically we use Belgium (europe-west1) & Netherlands (europe-west4)
Do you encrypt data at rest?
Yes, all data is encrypted at rest using AES256.
Does Dreamdata have access to system logs incase there was for example, any account breach?
Yes, We have centralized logging for all infrastructure and applications. Logs have monitoring and alerting enabled, these are monitored by Engineering and Security Teams. 30 days of logs are active before being archived.
Does Dreamdata have a Web Application Firewall in place
Yes, We employ Web Application Firewalls (WAFs) in front of our GCP infrastructure to prevent typical attacks and allow for things like rate limiting or region controls.
What is your recovery time objective (RTO) in case of critical failure?
24 hours
What is your recovery point objective (RPO) in case of critical failure?
24 hours
Do you have data retention periods defined anywhere?
View our data retention periods defined in our documentation: https://docs.dreamdata.io/article/daz3uwwaiu-data-retention
Do you have a DPA or Data Processing Agreement?
Yes, you can found our DPA on our legal page https://dreamdata.io/legal or directly at https://drive.google.com/file/d/15zeQKVHIwDDKGqYkLzQZwn8atvlO9HwG/view
Does Dreamdata develop or train any AI models?
Yes. Dreamdata develops and maintains machine learning models that run inside the Dreamdata platform to improve analytics specific to each customer. Your data is never used to train public or third-party AI systems.
Is the AI model a foundation model?
No. Our models are purpose-built machine learning algorithms for analytics, not general-purpose foundation or generative models.
Describe the AI model developed.
We have developed AI machine learning for data enrichment, identity resolution, revenue attribution, and recommendations. These models clean and connect customer data to improve accuracy and insights.
Please indicate whether any information provided by customer is used in the development or training of any AI models and provide a description of the types of information used.
The Models developed are divided into two buckets. 1. On anonymized and aggregated data across customers to improve generic data quality and enrichment.. 2. On a customer’s own data in isolation when features require tenant-specific training. Note: Dreamdata does not share customer data — anonymized or not — with any public or third-party AI model or service.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public