SOC2C

Govworx security & compliance

An overview of Govworx's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, HIPAA, NIST CSF
Penetration testNot listed
Subprocessors2 listed
HostingAWS
Trust centerView

Security questions about Govworx

Is Govworx secure?
Security isn't a single yes/no, but Govworx is SOC 2 Type II compliant and holds SOC 2 Type II, HIPAA, NIST CSF, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Govworx have a bug bounty or vulnerability disclosure program?
Govworx hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@govworx.ai or via a /security page.
Who are Govworx's subprocessors?
Govworx lists 2 subprocessors on its trust center, including Amazon Web Services, Datadog. Buyers use this for fourth-party risk review.
Where does Govworx host or store data?
Govworx hosts on AWS. Data residency details are on its trust center.
Where is Govworx's trust center or security page?
Govworx's trust center is at https://security.govworx.ai. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Govworx's full SOC 2 profile →