SOC2C

GrowthBook Inc security & compliance

An overview of GrowthBook Inc's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, GDPR, HIPAA, CCPA
Penetration testNot listed
Subprocessors5 listed
HostingAWS
Trust centerView

Security questions about GrowthBook Inc

Is GrowthBook Inc secure?
Security isn't a single yes/no, but GrowthBook Inc is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, HIPAA, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does GrowthBook Inc have a bug bounty or vulnerability disclosure program?
GrowthBook Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@growthbook.io or via a /security page (GrowthBook Inc lists a security contact).
Who are GrowthBook Inc's subprocessors?
GrowthBook Inc lists 5 subprocessors on its trust center, including Amazon Web Services, Fastly, MongoDB Atlas, Snowflake, Jitsu. Buyers use this for fourth-party risk review.
Where does GrowthBook Inc host or store data?
GrowthBook Inc hosts on AWS. Data residency details are on its trust center.
Where is GrowthBook Inc's trust center or security page?
GrowthBook Inc's trust center is at https://trust.growthbook.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See GrowthBook Inc's full SOC 2 profile →