Question 1

Is Elate SOC 2 compliant?

Accepted Answer

Elate is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Elate GDPR compliant?

Accepted Answer

According to Elate's public trust center, Elate is GDPR compliant. On SOC2C this listing is Listed.

Question 3

Is Elate SOC 2 Type I or Type II?

Accepted Answer

Elate is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use Elate's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Elate's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is Elate penetration tested?

Accepted Answer

Elate hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Is Elate secure?

Accepted Answer

Security isn't a single yes/no, but Elate is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 7

Does Elate have a bug bounty or vulnerability disclosure program?

Accepted Answer

Elate hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@goelate.com or via a /security page (Elate lists a security contact).

Question 8

Who are Elate's subprocessors?

Accepted Answer

Elate lists 7 subprocessors on its trust center, including Google Cloud Platform, Courier, Intercom, Sendgrid, Merge. Buyers use this for fourth-party risk review.

Question 9

Where does Elate host or store data?

Accepted Answer

Elate hosts on GCP, and handles Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.

Question 10

Where is Elate's trust center or security page?

Accepted Answer

Elate's trust center is at https://trust.goelate.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 11

What kind of PII does Elate collect?

Accepted Answer

Elate collects the first name, last name, and email from employees. Elate does not and will not sell any PII to any third parties.

Question 12

How long is data from my integrations stored in Elate?

Accepted Answer

For Elate-managed integrations, Elate only keeps third party data in aggregate form and discards any source data within 24 hours. Elate will always collect the minimum amount of information needed to provide goal updates.

Question 13

How do I delete my organization data permanently in Elate?

Accepted Answer

Elate always allows its customers to request any data to be exported and deleted from our system. Elate keeps data in archival form to help with restorations of unintended user deletes. You can request a permanent data deletion via help@goelate.com.

Question 14

What products or features in Elate currently leverage AI technologies?

Accepted Answer

The Strategy Advisor module leverages AI. Additional information can be found on Elate AI FAQ.

Elate

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

1099-Prep

Octopus Deploy

Ask Ai