SOC2C

Fleet Device Management security & compliance

An overview of Fleet Device Management's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type I, SOC 2 Type II
Penetration testNot listed
Subprocessors5 listed
HostingAWS
Trust centerView

Security questions about Fleet Device Management

Is Fleet Device Management secure?
Security isn't a single yes/no, but Fleet Device Management is SOC 2 Type II compliant and holds SOC 2 Type I, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Fleet Device Management have a bug bounty or vulnerability disclosure program?
Fleet Device Management hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@fleetdm.com or via a /security page (Fleet Device Management lists a security contact).
Who are Fleet Device Management's subprocessors?
Fleet Device Management lists 5 subprocessors on its trust center, including Amazon Web Services, Bunny, CloudFlare, GitHub, Heroku. Buyers use this for fourth-party risk review.
Where does Fleet Device Management host or store data?
Fleet Device Management hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Fleet Device Management's trust center or security page?
Fleet Device Management's trust center is at https://trust.fleetdm.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Fleet Device Management's full SOC 2 profile →