Is this your company? Buyers are checking Fast Weigh here. Claim fast-weigh.dev free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Fast Weigh
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Fast Weigh is SOC 2 Type II compliant.
About
Fast-Weigh is a SaaS platform for bulk material sales and transportation. We take security seriously and are committed to protecting your data. In this trust center we document how we store, protect, back up, and serve your data.
Compliance & infrastructure
Hosting
Azure
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Documents
19Documents
- SOC 2 Type IIRequest
- Pen Test ReportRequest
- Information Security Roles and ResponsibilitiesRequest
- Code of ConductRequest
- Information Security Policy (AUP)Request
- Asset Management PolicyRequest
- Access Control PolicyRequest
- Data Management PolicyRequest
- Physical Security PolicyRequest
- Risk Management PolicyRequest
- Third-Party Management PolicyRequest
- Cryptography PolicyRequest
- Secure Development PolicyRequest
- Human Resource Security PolicyRequest
- Incident Response PlanRequest
- Business Continuity and Disaster Recovery PlanRequest
- Operations Security PolicyRequest
- Human Resource Security Policy (EN)Request
- Operations Security Policy (EN)Request
Subprocessors
3- MMicrosoft Azure · Cloud provider
- GGitHub · Version control
- TTwilio · Engineering
Compliance leadership
The person who leads Fast Weigh's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Fast Weigh's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
No security incidents to dateJan 2025
Subscribe to Trust Center updates for notifications of any future incident.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Fast Weigh SOC 2 compliant?
Fast Weigh is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Fast Weigh SOC 2 Type I or Type II?
Fast Weigh is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Fast Weigh's SOC 2 for a vendor risk assessment?
Yes. Fast Weigh's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Fast Weigh penetration tested?
Yes — Fast Weigh undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Can I get Fast Weigh's SOC 2 report?
Fast Weigh's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Does Fast Weigh have a penetration test report?
Fast Weigh publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Is Fast Weigh secure?
Security isn't a single yes/no, but Fast Weigh is SOC 2 Type II compliant, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Fast Weigh have a bug bounty or vulnerability disclosure program?
Fast Weigh hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@fast-weigh.dev or via a /security page (Fast Weigh lists a security contact).
Who are Fast Weigh's subprocessors?
Fast Weigh lists 3 subprocessors on its trust center, including Microsoft Azure, GitHub, Twilio. Buyers use this for fourth-party risk review.
Where does Fast Weigh host or store data?
Fast Weigh hosts on Azure, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Fast Weigh's trust center or security page?
Fast Weigh's trust center is at https://trust.fast-weigh.dev. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Do you support single sign-on (SSO)?
Yes, we support SSO. We have integrations with popular identity providers like Azure AD, Okta, OneLogin, and more. We can also set up custom SAML or OAuth integrations.
Where are your servers located?
Fast-Weigh is hosted on Microsoft Azure's cloud platform. We have app servers and databases in the East US, Central US, and West US regions.
Are you PCI compliant?
Fast-Weigh does not store or process credit card information. We use a third-party payment gateway (Basys) to handle all payment processing. Basys is PCI compliant. Basys provides a secure iframe that we embed in our application to handle all payment processing.
Do you perform database backups?
Yes, we use Azure SQL's point-in-time restoration feature. This allows us to restore a database to any snapshot within the last 35 days. We also perform daily backups of all databases to a separate storage account for added redundancy.
Can I export my data?
Yes, you can export your data at any time. We provide tools to export data in CSV, Excel, or JSON formats.
How often do you deploy updates?
Any critical security updates or bug fixes are deployed immediately. Feature releases typically occur every 4-6 weeks.
Do you have a staging environment?
Yes, we have a separate staging environment that mirrors our production environment. We deploy updates to staging first to test for any issues before deploying to production.
Do you test your updates prior to release?
Yes. All updates first pass automated tests in our CI/CD pipeline. We also have a QA team that manually tests new features and bug fixes before they are deployed to production.
How do you handle rollbacks?
In the event of a failed deployment, we can roll back to the previous version of the application. Our deployment process is automated and includes built-in rollback procedures.
Do you share my data with third parties?
We do not share your data with third parties unless required by law or to provide our services.
Food & Drink peers that completed SOC 2
Lunch Counter. Inc
lunch-counter.com · Food & Drink
SOC 2 Type IIRenewal not public
Healthy America Association
healthyamericaassociation.com · United States · Food & Drink
SOC 2 Type IIRenewal not public
SutterTek LLC
suttertek.com · Food & Drink
SOC 2 Type IIRenewal not public
Healthy Roster Inc
healthyroster.com · European Union · Food & Drink
SOC 2 Type IIRenewal not public