Heymarvin security & compliance
An overview of Heymarvin's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksISO 42001, ISO 27001, SOC 2 Type II, SOC 2 Type I, GDPR, CCPA
Penetration testNot listed
Subprocessors12 listed
HostingAWS, Azure
Trust centerView
Security questions about Heymarvin
- Is Heymarvin secure?
- Security isn't a single yes/no, but Heymarvin is SOC 2 Type II compliant and holds ISO 42001, ISO 27001, SOC 2 Type II, SOC 2 Type I, GDPR, CCPA, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does Heymarvin have a bug bounty or vulnerability disclosure program?
- Heymarvin hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@heymarvin.com or via a /security page (Heymarvin lists a security contact).
- Who are Heymarvin's subprocessors?
- Heymarvin lists 12 subprocessors on its trust center, including Amazon Web Services, Assembly.AI, Google Workspace, Pendo, New Relic. Buyers use this for fourth-party risk review.
- Where does Heymarvin host or store data?
- Heymarvin hosts on AWS, Azure, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Data to Train AI models. Data residency details are on its trust center.
- Where is Heymarvin's trust center or security page?
- Heymarvin's trust center is at https://trust.heymarvin.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.