Is this your company? Buyers are checking MaintainX here. Claim getmaintainx.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
MaintainX
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
MaintainX is SOC 2 Type II compliant. MaintainX also holds ISO 27001.
About
We understand that you put a lot of trust into your vendors. At MaintainX, we are serious about security. Our business is built on security. As such, we have implemented security and privacy controls to provide a safe and secure application. Controls have been implemented to minimize the risk to the confidentiality, integrity, and availability of the system. Controls generally fall into one of the following categories: physical, technical, or administrative. Our [Terms of Services](https://www.getmaintainx.com/terms-of-service/) are available on our website. Subprocessors last update: 2024-01-
Compliance & infrastructure
Hosting
AWS
Data handled
Employee personally identifiable informationCredit card informationPersonal health information
Documents
1Documents
Subprocessors
24- AAmplitude · Data Analytics, Product, SupportUnited States
- AAmazon Web Services · HostingUnited States
- DDatadog · Data Analytics, SupportUnited States
- OOkta · ProductUnited States
- AAnthropic · ProductUnited States
- AAPI2PDF · ProductUnited States
- BBirdie · Customer SupportUnited States
- DDatabricks · Data storage and processingUnited-States
- GGainsight · Customer SuccessUnited-States
- GGoogle Workspace · Data Analytics, Hosting, ProductUnited States
- IIterable · ProductUnited States
- IIntercom · Customer Success, SupportUnited States
Show all 24 subprocessorsShow fewer
- LLangfuse · Data AnalyticsUnited States
- OOneSignal · ProductUnited States
- OOpenAI · ProductUnited States
- QQdrant · Data storage and processingUnited States
- SSegment · Data AnalyticsUnited States
- SStripe · FinanceUnited States
- TTray.io · ProductUnited States
- TTwilio · ProductUnited States
- WWarmly.ai · SalesUnited States
- WWorkato · ProductUnited States
- WWorkramp · Customer SupportUnited States
- ZZendesk · Customer SupportUnited States
Compliance leadership
The person who leads MaintainX's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. MaintainX's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is MaintainX SOC 2 compliant?
MaintainX is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is MaintainX ISO 27001 certified?
According to MaintainX's public trust center, MaintainX is ISO 27001 certified. On SOC2C this listing is Listed.
Is MaintainX SOC 2 Type I or Type II?
MaintainX is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use MaintainX's SOC 2 for a vendor risk assessment?
Yes. MaintainX's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is MaintainX penetration tested?
MaintainX hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is MaintainX secure?
Security isn't a single yes/no, but MaintainX is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does MaintainX have a bug bounty or vulnerability disclosure program?
MaintainX hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@getmaintainx.com or via a /security page (MaintainX lists a security contact).
Who are MaintainX's subprocessors?
MaintainX lists 24 subprocessors on its trust center, including Amplitude, Amazon Web Services, Datadog, Okta, Anthropic. Buyers use this for fourth-party risk review.
Where does MaintainX host or store data?
MaintainX hosts on AWS, and handles Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is MaintainX's trust center or security page?
MaintainX's trust center is at https://trust.getmaintainx.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
How do users authenticate in the MaintainX platform?
At MaintainX, we take the security of your data very seriously. To authenticate to the MaintainX application, two options are available: - Authenticating with a One-Time Password (OTP) - Authenticating with Single Sign-On (SSO) The MaintainX application does not use passwords to authenticate users. Therefore, no passwords are stored in our databases.
How are permissions managed in the MaintainX platform?
The MaintainX platform uses Role-Based Access Control. The platform has 3 roles configured by default. These roles come with a pre-set of permissions, but they are adapted during onboarding by the implementation team to fit exactly your needs. There are over 100 granular permissions that can be toggled on or off for any role, team or user.
How do you protect data confidentiality, integrity and availability?
Your data is stored in our encrypted database using AES 256, protected by multiple layers of security, and backed up daily. Backups are duplicated in other regions and they are tested regularly. The data sent to MaintainX are encrypted in transit with TLSv1.2.
Where is my data located?
MaintainX is hosted in Amazon AWS in the US cloud infrastructure.
What can MaintainX integrate to?
The MaintainX platform maintains an API that can be used to integrate into your current software stack. We also offer customized integration to different platforms such as Quickbook, Salesforce, SAP, etc.
How do you backup your data?
Incremental backups of the database are performed continuously and complete backups are performed daily. Both types of backups are tested regularly. Backups are duplicated in other regions.
How do we allow MaintainX through our firewall?
You can follow this help guide to find domains that need to be added to your allow list. https://help.getmaintainx.com/whitelisted-maintainx-domains
Technology peers that completed SOC 2
Action1
action1.com · United States · Technology
SOC 2 Type IIRenewal not public
ELJUN LLC
eljunllc.com · United States · Technology
SOC 2 Type IIRenewal not public
equipifi
equipifi.com · United States · Technology
SOC 2 Type IIRenewal not public
IntelligentSystems Corp
hyperbound.ai · United States · Technology
SOC 2 Type IRenewal not public