SOC2C

Zipline. Inc security & compliance

An overview of Zipline. Inc's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, GDPR, CCPA, HIPAA
Penetration testNot listed
Subprocessors13 listed
HostingAWS, GCP
Trust centerView

Security questions about Zipline. Inc

Is Zipline. Inc secure?
Security isn't a single yes/no, but Zipline. Inc is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, CCPA, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Zipline. Inc have a bug bounty or vulnerability disclosure program?
Zipline. Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@getzipline.com or via a /security page (Zipline. Inc lists a security contact).
Who are Zipline. Inc's subprocessors?
Zipline. Inc lists 13 subprocessors on its trust center, including Heroku, Crunchy Data, Amazon Web Services, Google Cloud Platform, OpenAI. Buyers use this for fourth-party risk review.
Where does Zipline. Inc host or store data?
Zipline. Inc hosts on AWS, GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Zipline. Inc's trust center or security page?
Zipline. Inc's trust center is at https://trust.getzipline.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Zipline. Inc's full SOC 2 profile →