Is this your company? Buyers are checking Hasura here. Claim hasura.io free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Hasura
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Hasura is SOC 2 Type II compliant. Hasura also holds ISO 27001, GDPR, CCPA, and HIPAA.
About
API Platform, built for data delivery. The fastest and simplest way to build, operate, federate, govern, and evolve a robust API (GraphQL, REST, etc) on all your data – across one domain or many.
Compliance & infrastructure
Hosting
AWSGCPAzure
Data handled
Customer personally identifiable informationCredit card informationPersonal health information
Documents
5Subprocessors
26- AAmazon Web Services · Cloud Hosting Provider
- GGoogle Cloud Platform · Cloud Hosting Provider
- CCloudflare · Cloud Infrastructure and Security
- ZZendesk · Customer Support
- MMicrosoft Azure · Cloud Hosting Provider
- AAnthropic · AI functionality to power PromptQL
- OOpenAI · AI functionality to power PromptQL
- SSalesforce · Customer Relationship Management
- DDatadog · Log Storage/Analysis
- SSlack · Instant Messaging and communication
- HHoneyComb · Log Storage/Analysis
- GGoogle Workspace · Identity Provider
Show all 26 subprocessorsShow fewer
- SStripe · Payment Processor
- 66sense · CRM & SalesUSA
- CClari · CRM & Sales
- CClickhouse · Data and Analytics
- FFiveTran · Data and Analytics
- SSentry · Operations and Monitoring
- LLinear · Business Applications
- MMaxio · Payments and Billing
- MMarketo · CRM & Sales
- NNetsuite · Payments and Billing
- IIncident.io · Operations & Monitoring
- SSegment · Data and Analytics
- ZZoom · Business Applications
- ZZoomInfo · CRM & Sales
Compliance leadership
The person who leads Hasura's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Hasura's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Hasura SOC 2 compliant?
Hasura is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Hasura ISO 27001 certified?
According to Hasura's public trust center, Hasura is ISO 27001 certified. On SOC2C this listing is Listed.
Is Hasura GDPR compliant?
According to Hasura's public trust center, Hasura is GDPR compliant. On SOC2C this listing is Listed.
Is Hasura CCPA compliant?
According to Hasura's public trust center, Hasura is CCPA compliant. On SOC2C this listing is Listed.
Is Hasura HIPAA compliant?
According to Hasura's public trust center, Hasura is HIPAA compliant. On SOC2C this listing is Listed.
Is Hasura SOC 2 Type I or Type II?
Hasura is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Hasura's SOC 2 for a vendor risk assessment?
Yes. Hasura's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Hasura penetration tested?
Hasura hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get Hasura's SOC 2 report?
Hasura's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Does Hasura have an ISO 27001 certificate?
Hasura publishes an ISO certificate on its trust center; you can request access through SOC2C.
Is Hasura secure?
Security isn't a single yes/no, but Hasura is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, GDPR, CCPA, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Hasura have a bug bounty or vulnerability disclosure program?
Hasura hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@hasura.io or via a /security page (Hasura lists a security contact).
Who are Hasura's subprocessors?
Hasura lists 26 subprocessors on its trust center, including Amazon Web Services, Google Cloud Platform, Cloudflare, Zendesk, Microsoft Azure. Buyers use this for fourth-party risk review.
Where does Hasura host or store data?
Hasura hosts on AWS, GCP, Azure, and handles Customer personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Hasura's trust center or security page?
Hasura's trust center is at https://trust.hasura.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Hasura
Reproduced from Hasura's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
What data do you collect?
Hasura values and prioritizes data privacy and security within our products. Our suite of applications contain self-hosted, cloud, and hybrid offerings. The data is collected as needed to provide the intended services, remains limited, and dependent on the selected offering. For reference, please review our Privacy policy here: https://hasura.io/legal/hasura-privacy-policy
Where are your servers located?
Hasura maintains servers in various countries around the world, currently in Singapore, Ireland, Belgium, France, India, UK, Germany, Australia, Canada, Japan and the United States.
How do you handle the data we collect?
The Personal Information that you provide, subject to disclosure in accordance with this Policy, shall be maintained in a safe and secure manner. Hasura databases and information are stored on secure servers with appropriate firewalls and physical and electronic safeguards. Hasura uses industry standard physical, technical and administrative security measures designed to safeguard all Personal Information and keep it confidential and secure. We conduct periodic reviews of our security measures pertaining to our Personal Information collection, storage, to guard against unauthorized access to systems. For additional information, reference our security documentation including the SOC 2 Type 2 report.
I found a security bug. Do you have an established bug bounty program?
Hasura has an internal bug bounty program. Please reference our Security Vulnerable Disclosure Protocol here for instructions: https://hasura.io/docs/latest/policies/security-disclosure/
Does Hasura have a Data Processing Addendum (DPA)?
Yes, and we can enter into a DPA with our enterprise customers as applicable. Our DPA is linked here: https://hasura.io/legal/hasura-data-processing-addendum
Technology peers that completed SOC 2
Action1
action1.com · United States · Technology
SOC 2 Type IIRenewal not public
ELJUN LLC
eljunllc.com · United States · Technology
SOC 2 Type IIRenewal not public
equipifi
equipifi.com · United States · Technology
SOC 2 Type IIRenewal not public
IntelligentSystems Corp
hyperbound.ai · United States · Technology
SOC 2 Type IRenewal not public