SOC2C

epsio security & compliance

An overview of epsio's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, GDPR
Penetration testNot listed
Subprocessors3 listed
HostingGCP
Trust centerView

Security questions about epsio

Is epsio secure?
Security isn't a single yes/no, but epsio is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does epsio have a bug bounty or vulnerability disclosure program?
epsio hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@epsio.io or via a /security page (epsio lists a security contact).
Who are epsio's subprocessors?
epsio lists 3 subprocessors on its trust center, including GCP, Elastic, Tailscale. Buyers use this for fourth-party risk review.
Where does epsio host or store data?
epsio hosts on GCP. Data residency details are on its trust center.
Where is epsio's trust center or security page?
epsio's trust center is at https://trust.epsio.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See epsio's full SOC 2 profile →