Is this your company? Buyers are checking hellotilt.com here. Claim hellotilt.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
hellotilt.com
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
hellotilt.com is SOC 2 Type II compliant.
About
Tilt's leave management system makes navigating critical life moments easy with our tech, and more human with our hearts. Tilt’s tech-powered human-centric approach means you can leave the leave management to us. The only leave management solution that manages all leave types across the US.
Compliance & infrastructure
Hosting
AWS
Data handled
Employee personally identifiable informationEmployee contact information, state of residenceDate of hire, historical leave of absence dataEmployee social security numbersEmployee personal health information
Documents
4Subprocessors
16- AAmazon Web Services · awsUSA
- GGoogle · gsuiteadminUSA
- AAtlassianUSA
- SSlack · slackUSA
- KKustomerUSA
- TTwilioUSA
- GGitHub · githubUSA
- ZZoomUSA
- HHubSpot · hubspotUSA
- PPendo.io Inc.USA
- SSnowflakeUSA
- DDatadogUSA
Show all 16 subprocessorsShow fewer
- HHevo DataUSA
- DDocuSealUSA
- MMergeUSA
- OOpenAIUSA
Compliance leadership
The person who leads hellotilt.com's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. hellotilt.com's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is hellotilt.com SOC 2 compliant?
hellotilt.com is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is hellotilt.com SOC 2 Type I or Type II?
hellotilt.com is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use hellotilt.com's SOC 2 for a vendor risk assessment?
Yes. hellotilt.com's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is hellotilt.com penetration tested?
Yes — hellotilt.com undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Does hellotilt.com have a penetration test report?
hellotilt.com publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Can I get hellotilt.com's SOC 2 report?
hellotilt.com's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is hellotilt.com secure?
Security isn't a single yes/no, but hellotilt.com is SOC 2 Type II compliant, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does hellotilt.com have a bug bounty or vulnerability disclosure program?
hellotilt.com hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@hellotilt.com or via a /security page (hellotilt.com lists a security contact).
Who are hellotilt.com's subprocessors?
hellotilt.com lists 16 subprocessors on its trust center, including Amazon Web Services, Google, Atlassian, Slack, Kustomer. Buyers use this for fourth-party risk review.
Where does hellotilt.com host or store data?
hellotilt.com hosts on AWS, and handles Employee personally identifiable information, Employee contact information, state of residence, Date of hire, historical leave of absence data, Employee social security numbers. Data residency details are on its trust center.
Where is hellotilt.com's trust center or security page?
hellotilt.com's trust center is at https://trust.hellotilt.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Do you support Single Sign-On (SSO)?
Yes! Check out our Tilt Help Center for articles on SSO setup instructions. We also have Okta SSO setup instructions.
Are customers expected to host an SFTP internally?
Nope! You can set up an SFTP file feed between Tilt and your HRIS or payroll system. If you choose to send Tilt additional data after initial implementation, we will use SFTP. We've even written up some handy SFTP setup instructions.
Do you have a list of your current access controls?
Our access controls are listed in our SOC 2 Type II report. We will provide current customers access to the SOC 2 report upon the customer’s request.
Where can I access Tilt's most recent SOC 2 Type II report?
Our most recent complete SOC 2 Type II report is available in the “Resources” tab of the Tilt Trust Center.
Can Tilt provide a HIPAA-compliant report, or a BAA?
Tilt’s services are not subject to regulation under HIPAA as a covered entity or a business associate entity. Tilt functions as an extension of the employer's HR team.
What API integrations do you offer?
We currently offer API integrations with Bamboo and Rippling. More integrations are on their way, you can stay updated by checking out our Help Center page on integrations.
Can Tilt provide backup procedure information and/or a BCP-DR report?
Backups are done continuously (every transaction), conducted within AWS, and secured using AWS IAM. Backups are stored for thirty days. Database information is stored for as long as the information is required by the customer and no longer. Our policies are for internal use and not releasable to external entities, but are reviewed as part of our SOC 2 evaluation. We conduct disaster recovery exercises annually.
Can Tilt provide us with a high-level network infrastructure or data flow diagram?
Yes!
Where can I find info on how Tilt processes data, and/or data security measures?
Our standard customer contracts are published to the Legal Hub section of our website, including our Data Processing Agreement. Our general security and compliance methods and commitments are addressed in the documents linked below. [https://hellotilt.com/security/](security) https://hellotilt.com/dpa/
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public