Is this your company? Buyers are checking HeroCoders here. Claim herocoders.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
HeroCoders
Sourced from public information. Not yet verified by the company.
HeroCoders is SOC 2 Type II compliant. HeroCoders also holds GDPR.
About
HeroCoders’ workflow management and team collaboration software helps you work simpler, faster and safer. More than 70,000 companies use our Cloud-based apps across the Atlassian, Microsoft Teams and monday.com platforms. Checklists for Jira – available in Free, Pro, and Enterprise versions on the Atlassian Marketplace – helps teams handle agile processes including Acceptance Criteria and Definition of Done. Clockwork for Jira, available in Free (no longer offered), Lite, and Pro versions, is a time tracking and timesheet solution for busy teams that need maximum flexibility and accuracy when
Compliance & infrastructure
Documents
25- [2026] Penetration Test Report for Portfolio for JiraRequest
- [2026] Penetration Test Report for Clockwork for JiraRequest
- [2026] Penetration Test Report for Checklists for Jira Cloud AppsRequest
- [2026] Professional Indemnity Insurance for IT IndustryRequest
- [2025] CAIQ Lite v4.0.3 STAR Security QuestionnaireRequest
- [2025] GDPR Letter of AttestationPublic
- [2025] SOC 2 Type 2 Audit ReportRequest
- [2025] SOC 2 Type 2 Letter of AttestationPublic
- [2025] Penetration Test Report for Clockwork for JiraRequest
- [2025] Penetration Test Report for Checklist for Jira Cloud AppsRequest
- [2024] Penetration Test Report for Clockwork for JiraRequest
- [2024] Penetration Test Report for Checklist for Jira Cloud AppsRequest
- [2024] SOC 2 Type 1 Audit ReportRequest
- [2024] SOC 2 Type 1 Letter of AttestationPublic
- Security At Work Policy_2.2Request
- Personal Data Protection Policy 2.0Request
- Password Policy_1.0Request
- Cryptography Policy_2.1Request
- Data Management Policy_2.1Request
- Retention Policy_2.1Request
- Risk Management Policy_1.1Request
- Incident Response Program_2.1Request
- Third-Party Risk Management Policy_2.1Request
- Human Resources Security Policy_2.1Request
- Code of Conduct_2.1Request
Subprocessors
10- AAmazon Web Services EMEA SARL · Infrastructure servicesLocation: Europe
- AAtlassian Pty Ltd. · Infrastructure servicesLocation: United States / Europe
- DDatadog, Inc. · Infrastructure monitoringLocation: United States
- FFunctional Software, Inc. (Sentry) · Software development servicesLocation: United States
- HHeroku, Inc. · Infrastructure servicesLocation: United States / Europe
- IIntercom R&D UC · Customer supportLocation: United States
- MMongoDB, Inc. · Infrastructure servicesLocation: United States / Europe
- NNew Relic, Inc. · Infrastructure monitoringLocation: United States
- SSolarWinds Worldwide, LLC (Papertrail) · Application log management and archiveLocation: United States
- TTwilio Ireland Ltd. · Sending emailsLocation: Europe
Compliance leadership
The person who leads HeroCoders's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. HeroCoders's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Updates to our Subprocessors ListJun 2026
We would like to inform you that we will be updating our Subprocessors List to include Atlassian Pty Ltd. as a subprocessor for Checklists for Jira Enterprise app. This change is part of our ongoing migration of applications to the Atlassian Forge platform - you can learn more in Atlassian’s documentation: _About Forge_. As with Checklists for Jira Pro, Clockwork Lite for Jira, and Clockwork Pro for Jira, Atlassian Pty Ltd. will now provide infrastructure services also for Checklists for Jira Enterprise. This means Atlassian may have access to End User data in transit through the Forge proxy. The HeroCoders Team
Key policies now available in our Trust CenterMay 2026
To better support our Customers' third-party risk assessment and vendor review processes, we have expanded the information available through our Trust Center. In addition to our existing security and compliance documentation, we now provide access to key company policies that are frequently requested during security reviews and procurement processes. Our goal is to make it easier for Customers to assess HeroCoders' security, privacy, and compliance practices while reducing the need for individual documentation requests. We encourage you to visit our Trust Center to review the available resources. The HeroCoders Team
Updates to our Subprocessors ListMay 2026
We would like to inform you that we are updating our Subprocessors List by adding Atlassian Pty Ltd. as a new subprocessor as part of our migration of selected apps to the Atlassian Forge platform. You can learn more in Atlassian’s documentation: _About Forge_. Atlassian Pty Ltd. will provide infrastructure services for Checklists for Jira Pro, Clockwork Lite for Jira, and Clockwork Pro for Jira. This means Atlassian may have access to End User data in transit through the Forge proxy. In addition, Portfolio for Jira will use Atlassian-hosted storage through the Forge platform. As a result, End User data for Portfolio for Jira will be stored by Atlassian. The HeroCoders Team
We have updated our Privacy Policy.May 2026
We’re pleased to announce that we have updated our Privacy Policy. The new version reflects improvements in structure and clarity, making the document easier to navigate and more comprehensive. The update also aligns the Policy better with our current practices and applicable regulations. This update is provided for your information only - no action is required on your part. You can review the latest version here: Privacy Policy Cheers, The HeroCoders Team
New penetration test reports available now on our Trust CenterApr 2026
We’re pleased to announce that the 2026 penetration extended test reports for Checklists for Jira Cloud Apps and Clockwork for Jira are now available in the “Resources” section of our Trust Center as well as the 2026 penetration test report for Portfolio for Jira. As always, please let us know if you have any questions. The HeroCoders Team
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is HeroCoders SOC 2 compliant?
Is HeroCoders GDPR compliant?
Is HeroCoders SOC 2 Type I or Type II?
Can I use HeroCoders's SOC 2 for a vendor risk assessment?
Is HeroCoders penetration tested?
Can I get HeroCoders's SOC 2 report?
Is HeroCoders secure?
Does HeroCoders have a bug bounty or vulnerability disclosure program?
Who are HeroCoders's subprocessors?
Where does HeroCoders host or store data?
Where is HeroCoders's trust center or security page?
Where can I find answers to questions about Privacy and Security?
Where can I find your list of subprocessors?
Do you verify subprocessors with access to PII?
Business & Industrial peers that completed SOC 2
Newsworthy.ai
Octopus Deploy
1099-Prep
