SOC2C

Email on Acid security & compliance

An overview of Email on Acid's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type I · Listed
FrameworksSOC 2 Type I, ISO 27001, GDPR, CCPA
Penetration testNot listed
SubprocessorsNot listed
HostingNot listed
Trust centerView

Security questions about Email on Acid

Is Email on Acid secure?
Security isn't a single yes/no, but Email on Acid is SOC 2 Type I compliant and holds SOC 2 Type I, ISO 27001, GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Email on Acid have a bug bounty or vulnerability disclosure program?
Email on Acid hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@emailonacid.com or via a /security page.
Who are Email on Acid's subprocessors?
Email on Acid's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Email on Acid host or store data?
Email on Acid's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Email on Acid's trust center or security page?
Email on Acid's trust center is at https://emailonacid.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Email on Acid's full SOC 2 profile →