Question 1

Is FP Alpha SOC 2 compliant?

Accepted Answer

FP Alpha is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is FP Alpha SOC 2 Type I or Type II?

Accepted Answer

FP Alpha is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 3

Can I use FP Alpha's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. FP Alpha's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 4

Is FP Alpha penetration tested?

Accepted Answer

FP Alpha hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 5

Is FP Alpha secure?

Accepted Answer

Security isn't a single yes/no, but FP Alpha is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 6

Does FP Alpha have a bug bounty or vulnerability disclosure program?

Accepted Answer

FP Alpha hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@fpalpha.com or via a /security page (FP Alpha lists a security contact).

Question 7

Who are FP Alpha's subprocessors?

Accepted Answer

FP Alpha lists 3 subprocessors on its trust center, including Microsoft Azure, MongoDB Atlas, Amazon Web Services. Buyers use this for fourth-party risk review.

Question 8

Where does FP Alpha host or store data?

Accepted Answer

FP Alpha hosts on AWS, Azure, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.

Question 9

Where is FP Alpha's trust center or security page?

Accepted Answer

FP Alpha's trust center is at https://trust.fpalpha.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 10

Do you encrypt data during transit and at rest?

Accepted Answer

Data is securely transmitted using TLS 1.3 working together with HSTS, and encrypted at rest using AES-256.

Question 11

Is customer data separated from other customer data?

Accepted Answer

Yes, data is logically isolated and segmented by tagging each record with a unique alphanumeric tenant identifier.

Question 12

What AI models are used in your solutions?

Accepted Answer

We employ proprietary, in-house-developed models.

Question 13

Is customer data used to train your AI models?

Accepted Answer

FP Alpha does not use client’s documents nor other data for training AI algorithms unless explicitly given permission by our users. In such cases, we anonymize all data prior to its use in training.

Question 14

Do you offer SSO integration?

Accepted Answer

We have integrated SSO with Salesforce, Okta, and custom systems for some of our users, although not out of the box.

FP Alpha

About

Compliance & infrastructure

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Finance peers that completed SOC 2

nue

Mast Technologies Ltd

Nirvana Health

Kernel