Is this your company? Buyers are checking HoxHunt Oy here. Claim hoxhunt.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
HoxHunt Oy
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
HoxHunt Oy is SOC 2 Type II compliant. HoxHunt Oy also holds GDPR, CCPA, and HIPAA.
About
Welcome to Hoxhunt's Trust Center, which offers detailed insights into the security practices at Hoxhunt. [Hoxhunt](https://hoxhunt.com/) is a fast-growing Gartner®-recognized Software as a Service (SaaS) cybersecurity company founded in 2016. Hoxhunt's core product is a people-first human risk and security behavior change platform that helps enterprises to fight the increasing amount of cybercrime taking place via social engineering.
Compliance & infrastructure
Hosting
AWSGCP
Subprocessors
4- MMongoDB Atlas · Data storage and processing
- GGoogle Cloud · Infrastructure as a Service
- AAmazon Web Services · Infrastructure as a Service
- CCloudflare · Web protection & Content delivery network
Compliance leadership
The person who leads HoxHunt Oy's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. HoxHunt Oy's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is HoxHunt Oy SOC 2 compliant?
HoxHunt Oy is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is HoxHunt Oy GDPR compliant?
According to HoxHunt Oy's public trust center, HoxHunt Oy is GDPR compliant. On SOC2C this listing is Listed.
Is HoxHunt Oy CCPA compliant?
According to HoxHunt Oy's public trust center, HoxHunt Oy is CCPA compliant. On SOC2C this listing is Listed.
Is HoxHunt Oy HIPAA compliant?
According to HoxHunt Oy's public trust center, HoxHunt Oy is HIPAA compliant. On SOC2C this listing is Listed.
Is HoxHunt Oy SOC 2 Type I or Type II?
HoxHunt Oy is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use HoxHunt Oy's SOC 2 for a vendor risk assessment?
Yes. HoxHunt Oy's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is HoxHunt Oy penetration tested?
HoxHunt Oy hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is HoxHunt Oy secure?
Security isn't a single yes/no, but HoxHunt Oy is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, CCPA, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does HoxHunt Oy have a bug bounty or vulnerability disclosure program?
HoxHunt Oy hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@hoxhunt.com or via a /security page (HoxHunt Oy lists a security contact).
Who are HoxHunt Oy's subprocessors?
HoxHunt Oy lists 4 subprocessors on its trust center, including MongoDB Atlas, Google Cloud, Amazon Web Services, Cloudflare. Buyers use this for fourth-party risk review.
Where does HoxHunt Oy host or store data?
HoxHunt Oy hosts on AWS, GCP. Data residency details are on its trust center.
Where is HoxHunt Oy's trust center or security page?
HoxHunt Oy's trust center is at https://trust.hoxhunt.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by HoxHunt Oy
Reproduced from HoxHunt Oy's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
What personal data does Hoxhunt process?
Hoxhunt processes general employee information, such as employees' names and work email addresses. Hoxhunt does not process sensitive personal data. For more information, please contact your Hoxhunt account executive, customer success manager, or customer support at support@hoxhunt.com.
Where is Hoxhunt hosted?
Hoxhunt is hosted on Google Cloud in the EU region. For more information, please contact your Hoxhunt account executive, customer success manager, or customer support at [support@hoxhunt.com](mailto:support@hoxhunt.com).
How is customer data encrypted at Hoxhunt?
Customer data is encrypted at rest using AES-256 and in transit using TLS v1.2 or higher.
Does Hoxhunt perform regular penetration testing?
Yes, penetration tests are conducted quarterly by independent third-party assessors. Latest penetration test reports are available on Trust Center.
Where can I find information about Hoxhunt's uptime?
You should check out Hoxhunt's status page. There, you can see Hoxhunt's uptime, get updates on any outages, and view historical data. For more information, please contact your Hoxhunt account executive, customer success manager, or customer support at support@hoxhunt.com.
Does the Hoxhunt platform support Single Sign-On (SSO) and strong authentication?
SSO is the default authentication method to Hoxhunt platform. This means your users can access Hoxhunt using your company’s own credentials and multi-factor authentication policies. There are two authentication options; SSO (preferred), and one-time magic links. Hoxhunt itself not store or manage plaintext passwords – authentication is delegated to your IdP.) More information on Hoxhunt Knowledge Base.
How Hoxhunt uses AI?
Hoxhunt uses AI to enhance security awareness by analyzing reported emails, generating tailored training simulations, and delivering personalized learning experiences that help users detect and respond to threats faster. We apply AI in low-risk, tightly controlled ways, ensuring customer data is protected, never used to train third-party foundational models, and always handled in line with strict privacy and compliance standards.
Which integrations are required for Hoxhunt?
Hoxhunt requires integration with your email platform (e.g., Microsoft 365 or Google Workspace) and your Identity Provider (e.g., Azure AD, Okta) via SSO (SAML 2.0). Additional integrations, such as SIEM, LMS, or Slack/Teams, are optional and enhance functionality but are not mandatory. More about integrations on Knowledge Base (login required).
How can I contact customer support?
You can contact Hoxhunt's customer support via the platform or e-mail at [support@hoxhunt.com](mailto:support@hoxhunt.com). We also maintain self-service Hoxhunt Knowledge Base that includes documentation about the platform, answers to frequently asked questions and guides for technical troubleshooting.
How can I book a demo?
Please request a Hoxhunt demo here: https://hoxhunt.com/request-a-demo
Is Hoxhunt compliant with GDPR, CCPA and other privacy regulations?
Hoxhunt aligns its practices with the requirements of the General Data Protection Regulation (GDPR) as well as other applicable privacy laws, such as the California Consumer Privacy Act (CCPA). Hoxhunt follows key privacy principles, including data minimization and privacy-by-design. Hoxhunt has a Data Processing Agreement (DPA) in place with each customer.
Is Hoxhunt subject to the EU AI Act?
Yes, Hoxhunt is subject to the EU AI Act, a regulatory framework adopted by the European Commission to ensure trustworthy AI within the EU. The EU AI Act was officially adopted in March 2024. Hoxhunt’s use of AI falls under minimal risk. For more information, please contact your Hoxhunt account executive, customer success manager, or customer support at support@hoxhunt.com.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public