Is this your company? Buyers are checking EasyPost here. Claim easypost.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
EasyPost
Sourced from public information. Not yet verified by the company.
EasyPost is SOC 2 Type II compliant.
About
EasyPost was founded in 2012 as the first RESTful API for shipping. EasyPost has thousands of customers shipping billions of packages using our Shipping API each month. Our customers range in size from public companies to SMBs. EasyPosts’ most important concern is the protection and reliability of customer data. Web applications are protected by firewall rules and security groups configured to enforce perimeter security. Scans are performed regularly to ensure any vulnerabilities are quickly found and patched. Application penetration tests are performed at least quarterly by an independent thi
Compliance & infrastructure
Compliance leadership
The person who leads EasyPost's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. EasyPost's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
3/11 details · 27%SOC2C shows the verified essentials. 8 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- SubprocessorsList your subprocessors so buyers can assess fourth-party risk, the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is EasyPost SOC 2 compliant?
Is EasyPost SOC 2 Type I or Type II?
Can I use EasyPost's SOC 2 for a vendor risk assessment?
Is EasyPost penetration tested?
Is EasyPost secure?
Does EasyPost have a bug bounty or vulnerability disclosure program?
Who are EasyPost's subprocessors?
Where does EasyPost host or store data?
Where is EasyPost's trust center or security page?
Business & Industrial peers that completed SOC 2
Octopus Deploy
Newsworthy.ai
1099-Prep
