Embrace security & compliance
An overview of Embrace's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, GDPR, CCPA
Penetration testNot listed
Subprocessors3 listed
HostingAWS
Trust centerView
Security questions about Embrace
- Is Embrace secure?
- Security isn't a single yes/no, but Embrace is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does Embrace have a bug bounty or vulnerability disclosure program?
- Embrace hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@embrace.io or via a /security page (Embrace lists a security contact).
- Who are Embrace's subprocessors?
- Embrace lists 3 subprocessors on its trust center, including Amazon Web Services, OVHcloud, Scaleway. Buyers use this for fourth-party risk review.
- Where does Embrace host or store data?
- Embrace hosts on AWS, and handles Customer personally identifiable information, Credit card information, Personal health information, Device environment information. Examples include OS, region, app version, CPU, memory, battery, and network connectivity.. Data residency details are on its trust center.
- Where is Embrace's trust center or security page?
- Embrace's trust center is at https://trust.embrace.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.