Is this your company? Buyers are checking Heymarvin here. Claim heymarvin.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Heymarvin
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Heymarvin is SOC 2 Type II compliant. Heymarvin also holds ISO 42001, ISO 27001, GDPR, and CCPA.
About
Marvin is a qualitative data analysis for your research, design and strategy teams. This is Marvin's trust portal where you will find all the information related to our security and privacy policies. The access to this portal is subject to Non-Disclosure agreements and other access control agreements your team has signed with Marvin.
Compliance & infrastructure
Hosting
AWSAzure
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationData to Train AI models
Documents
24Documents
- ISO/IEC 27001:2022Request
- SOC 2 Type II - CurrentRequest
- AI Ethics and Trustworthiness PolicyRequest
- AI Risk Management PolicyRequest
- ISO 42001 2023 CertificateRequest
- GDPR Incident Response PlanRequest
- HeyMarvin-AI-2026-feb.pdfRequest
- Pentesting 2026 Executive summary.pdfRequest
- HeyMarvin-WebApp-2026-feb.pdfRequest
- GDPR Compliance Policy.pdfRequest
POLICIES
- GDPR Compliance PolicyRequest
- Human Resource Security PolicyRequest
- Risk Management PolicyRequest
- Secure Development PolicyRequest
- Access Control PolicyRequest
- Asset Management PolicyRequest
- Business Continuity and Disaster Recovery PlanRequest
- Cryptography PolicyRequest
- Data Management PolicyRequest
- Incident Response PlanRequest
- Information Security Policy (AUP)Request
- Information Security Roles and ResponsibilitiesRequest
- Third-Party Management PolicyRequest
- GDPR Incident Response PlanRequest
Subprocessors
12- AAmazon Web Services · aws
- AAssembly.AI
- GGoogle Workspace · gsuiteadmin
- PPendo · Data analytics
- NNew Relic
- MMicrosoft Azure
- JJira · jira
- SSentry
- GGitHub · github
- zzoom
- SSlack · slack
- OOpenAI · AI and Cloud Services ProviderUnited States
Compliance leadership
The person who leads Heymarvin's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Heymarvin's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Heymarvin SOC 2 compliant?
Heymarvin is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Heymarvin ISO 42001 certified?
According to Heymarvin's public trust center, Heymarvin is ISO 42001 certified. On SOC2C this listing is Listed.
Is Heymarvin ISO 27001 certified?
According to Heymarvin's public trust center, Heymarvin is ISO 27001 certified. On SOC2C this listing is Listed.
Is Heymarvin GDPR compliant?
According to Heymarvin's public trust center, Heymarvin is GDPR compliant. On SOC2C this listing is Listed.
Is Heymarvin CCPA compliant?
According to Heymarvin's public trust center, Heymarvin is CCPA compliant. On SOC2C this listing is Listed.
Is Heymarvin SOC 2 Type I or Type II?
Heymarvin is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Heymarvin's SOC 2 for a vendor risk assessment?
Yes. Heymarvin's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Heymarvin penetration tested?
Yes — Heymarvin undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Can I get Heymarvin's SOC 2 report?
Heymarvin's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Does Heymarvin have a penetration test report?
Heymarvin publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Is Heymarvin secure?
Security isn't a single yes/no, but Heymarvin is SOC 2 Type II compliant and holds ISO 42001, ISO 27001, SOC 2 Type II, SOC 2 Type I, GDPR, CCPA, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Heymarvin have a bug bounty or vulnerability disclosure program?
Heymarvin hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@heymarvin.com or via a /security page (Heymarvin lists a security contact).
Who are Heymarvin's subprocessors?
Heymarvin lists 12 subprocessors on its trust center, including Amazon Web Services, Assembly.AI, Google Workspace, Pendo, New Relic. Buyers use this for fourth-party risk review.
Where does Heymarvin host or store data?
Heymarvin hosts on AWS, Azure, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Data to Train AI models. Data residency details are on its trust center.
Where is Heymarvin's trust center or security page?
Heymarvin's trust center is at https://trust.heymarvin.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Heymarvin
Reproduced from Heymarvin's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
Are you SoC2 Compliant?
Yes. Our SoC2 report is available for download on this portal.
Are you GDPR/CCPA Compliant?
Yes. Our GDPR compliance report is available on this portal.
What is your policy on penetration tests?
Pen testing is done at least once every year on our systems. The pen test report is available to request on this portal.
Do you share customer data with OpenAI or any other third-party for training their models?
No, HeyMarvin does not share customer data with OpenAI or any other third-party for training their machine learning models. Even though we utilize third-party models like OpenAI to deliver AI services, we guarantee these entities do not have access to our customer data for refining or training their models. HeyMarvin may use _anonymized data_ for quality assurance or to enhance our own models. _Enterprise customers_ can choose to opt out of this usage. To opt out, please contact your sales representative or email us at [support@heymarvin.com](mailto:support@heymarvin.com).
Where can I get information on your specific security and privacy policies?
Most of our security and privacy policies are available on this portal. If you would like to request specific policies, please email us at security@heymarvin.com.
Could you fill out our specific questionnaire?
Yes. Enterprise customers can request specific security questionnaire. Please contact your sales person. IF you don't know your sales person please email security@heymarvin.com
Do you support Single Sign-On (SSO)?
Yes. We support all major SSO providers including Google, Microsoft (or Azure) and Okta.
Where are your servers located?
Our Servers are located in various regions of the US and the EU. You can also request to host your data exclusively in either of these regions.
Do you encrypt data at rest?
All data is encrypted both at rest and in transit using the current state of the art encryption. You can find our encryption standards and status in SoC2 audit report and on our trust portal.
Want to report a potential security issue?
Please reach out to security@heymarvin.com with the details of the issue.
Technology peers that completed SOC 2
Action1
action1.com · United States · Technology
SOC 2 Type IIRenewal not public
ELJUN LLC
eljunllc.com · United States · Technology
SOC 2 Type IIRenewal not public
equipifi
equipifi.com · United States · Technology
SOC 2 Type IIRenewal not public
IntelligentSystems Corp
hyperbound.ai · United States · Technology
SOC 2 Type IRenewal not public