Is this your company? Buyers are checking Firefly Learning Ltd here. Claim fireflylearning.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Firefly Learning Ltd
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Firefly Learning Ltd is SOC 2 compliant. Firefly Learning Ltd also holds GDPR, and CCPA.
About
Trust Firefly Learning (part of the Veracross group) to take care of your security and privacy. Our Trust Centre links you to all our privacy, security, and compliance programs, giving you all the info to manage your data confidently. Want access to our AI-enabled Trust Centre? Request access now ↗️ [Website Privacy Policy](https://www.fireflylearning.com/website-privacy-policy) [Product Privacy Policy](https://www.fireflylearning.com/product-privacy-policy) [DSAR](https://privacy.saymine.io/veracross?type=donotsell) [Customer Data Processing Agreement (DPA)](https://vcwebdistro.blob.core.wind
Compliance & infrastructure
GDPRCCPA
Hosting
AWSAzure
Documents
1Documents
Subprocessors
18- AAmazon Web Services · IaaS, hosting, database, files storage, CDNUnited States, Germany, Australia
- 11Password · Password managementUnited States
- DDocuSign · Contract & Document managementUnited States
- VVanta · SecurityUnited States
- AAtlassian · Applications, Services, and SupportUnited States
- MMicrosoft 365 · Email processing & delivery, file storageUnited States
- SSalesForce · Customer account managementUnited States
- SSlack · Business communicationUnited States
- SStoredTech · Managed Service Provider (MSP)United States
- ZZoom · TelecommunicationsUnited States
- PPardot · Marketing automation platformUnited States
- MMicrosoft Azure · IaaS, hosting, databases, files storage, CDNNorthern Europe and Australia
Show all 18 subprocessorsShow fewer
- WWonde · Integration SupportUK, Australia
- PPendo · Marketing communication & analysisUnited States
- WWorkable · Recruiting, candidate managementUnited States
- NNetmedia · Parent evening bookingUK
- SSentry · LoggingUK
- OOpenAI · Analytics, content creation, and summarisation of business data onlyUnited States
Compliance leadership
The person who leads Firefly Learning Ltd's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Firefly Learning Ltd's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Firefly Learning Ltd SOC 2 compliant?
Firefly Learning Ltd is SOC 2 compliant. On SOC2C this listing is Listed.
Is Firefly Learning Ltd GDPR compliant?
According to Firefly Learning Ltd's public trust center, Firefly Learning Ltd is GDPR compliant. On SOC2C this listing is Listed.
Is Firefly Learning Ltd CCPA compliant?
According to Firefly Learning Ltd's public trust center, Firefly Learning Ltd is CCPA compliant. On SOC2C this listing is Listed.
Can I use Firefly Learning Ltd's SOC 2 for a vendor risk assessment?
Yes. Firefly Learning Ltd's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Firefly Learning Ltd penetration tested?
Firefly Learning Ltd hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Firefly Learning Ltd secure?
Security isn't a single yes/no, but Firefly Learning Ltd is SOC 2 compliant and holds GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Firefly Learning Ltd have a bug bounty or vulnerability disclosure program?
Firefly Learning Ltd hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@fireflylearning.com or via a /security page (Firefly Learning Ltd lists a security contact).
Who are Firefly Learning Ltd's subprocessors?
Firefly Learning Ltd lists 18 subprocessors on its trust center, including Amazon Web Services, 1Password, DocuSign, Vanta, Atlassian. Buyers use this for fourth-party risk review.
Where does Firefly Learning Ltd host or store data?
Firefly Learning Ltd hosts on AWS, Azure. Data residency details are on its trust center.
Where is Firefly Learning Ltd's trust center or security page?
Firefly Learning Ltd's trust center is at https://trust.fireflylearning.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Firefly Learning Ltd
Reproduced from Firefly Learning Ltd's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
How does Firefly protect your data?
Firefly takes data privacy & security seriously. You can look at the Controls Firefly maintain's and review other FAQs below for additional details.
How does Firefly protect itself from bad actors on the dark web?
Firefly employes advanced monitoring of the dark web using a tool called Recorded Future which automatically scans and collects data from dark web sources. This information is used to identify potential threats, such as leaked credentials or sensitive company information. When compromised credentials are detected, these high priority alerts are automatically routed to our internal IT team who then takes the necessary steps to mitigate the risk. With the ability of Recorded Future to proactively detect potential threats, it allows us to take preventative measures like password resets or account lockouts before a bad actor can utilize these credentials in a malicious manner. By staying vigilant and proactive, Firefly is actively mitigating the risk of unauthorized access and potential data breaches, ensuring a higher level of security.
Where is customer data stored?
All customer data is stored in data centers located in Ireland and NSW, Australia.
What is the company's incident response plan?
Firefly maintain's an Incident Response Team (IRT) made up of technical, security, and management personnel. The incident response process follows several high-level phases, including: - Event assessment - Breach assessment & containment - Reporting - Post-breach activities
Does Firefly have cybersecurity insurance?
Firefly maintains sufficient cybersecurity insurance to protect the company and customers in the event of an incident.
What is the company's disaster recovery plan?
Firefly utilizes cloud providers to assist with a timely respones and recovery in the event of a disaster. The disaster recovery plan consists of multiple parts, including but not limited to the items below. - Customer data is backed up via an automated point-in-time recovery process every 12 hours. Daily backups are available for a rolling 7-day window. - Maintaining a Recovery Point Objective (RPO) of 12 hours and a Recovery Time Objective (RTO) of 1 hour or less. - Backups stored at Azure. Note: No customer data is stored on-premises.
Does Firefly have a third-party assessment process?
Firefly performs security assessments on all third-party vendors before any data is exchanged. This process includes questions surrounding the company's security policies, procedures, controls, and compliance with any applicable industry standards, and focuses on indentifying any potential vulnerabilities or gaps.
Does Firefly monitor for instrusions on a 24x7x365 basis?
Firefly utilizes a dedicated Security Operations Center (SOC) to monitor for 24x7x365. Additionally, Firefly also has the following security measures in place: - Distributed Denial of Service (DDoS) mitigation - File Integrity Monitoring (FIM) - Intrusion detection systems (IDS) - Continuous vulnerability monitoring - Virus & Malware scanning
Does Firefly encrypt data?
Customer data is protected by TLS 1.2+ encryption when in-flight and AES-256 encryption when at rest. More details can be found here: - Azure Security: https://azure.microsoft.com/en-us/overview/trusted-cloud/ - AWS Security: https://aws.amazon.com/security/ - OWASP Top Ten: https://owasp.org/www-project-top-ten/
What is Firefly's backup & retention policy?
Firefly has comprehensive backup and retention policies to ensure the security and availability of customer data. Firefly continuously backs up customer data via an automated point-in-time recovery process every 12 hours and daily backups are available for a rolling 7-day window. These back ups are stored at Azure, ensuring data is encrypted and secure. Firefly maintains a disaster recovery plan that includes maintaining a Recovery Point Objective (RPO) of 12 hours and a Recovery Time Objective (RTO) of 1 hour or less. This plan ensures that Firefly can respond and recover promptly in the event of a disaster. - Customer databases are separate and logically partitioned. - All databases are encrypted at rest using AES-256 standards.
Education peers that completed SOC 2
Go1
go1.com · Education
SOC 2 Type IIRenewal not public
Mentor Collective
mentorcollective.org · United States · Education
SOC 2 Type IIRenewal not public
Practera
practera.com · Australia · Education
SOC 2 Type IIRenewal not public
QLess - Queue Management System
qless.com · United States · Education
SOC 2 Type IIRenewal not public