Question 1

Is Hello Retriever SOC 2 compliant?

Accepted Answer

Hello Retriever is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Hello Retriever NIST CSF compliant?

Accepted Answer

According to Hello Retriever's public trust center, Hello Retriever is NIST CSF compliant. On SOC2C this listing is Listed.

Question 3

Is Hello Retriever SOC 2 Type I or Type II?

Accepted Answer

Hello Retriever is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use Hello Retriever's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Hello Retriever's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is Hello Retriever penetration tested?

Accepted Answer

Hello Retriever hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Is Hello Retriever secure?

Accepted Answer

Security isn't a single yes/no, but Hello Retriever is SOC 2 Type II compliant and holds SOC 2 Type II, NIST CSF. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 7

Does Hello Retriever have a bug bounty or vulnerability disclosure program?

Accepted Answer

Hello Retriever hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@helloretriever.com or via a /security page.

Question 8

Who are Hello Retriever's subprocessors?

Accepted Answer

Hello Retriever's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

Question 9

Where does Hello Retriever host or store data?

Accepted Answer

Hello Retriever's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Question 10

Where is Hello Retriever's trust center or security page?

Accepted Answer

Hello Retriever's trust center is at https://helloretriever.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Hello Retriever

About

Compliance & infrastructure

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Technology peers that completed SOC 2

Action1

ELJUN LLC

equipifi

IntelligentSystems Corp