Question 1

Is IncentX SOC 2 compliant?

Accepted Answer

IncentX is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is IncentX PCI DSS compliant?

Accepted Answer

According to IncentX's public trust center, IncentX is PCI DSS compliant. On SOC2C this listing is Listed.

Question 3

Is IncentX SOC 2 Type I or Type II?

Accepted Answer

IncentX is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use IncentX's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. IncentX's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is IncentX penetration tested?

Accepted Answer

Yes — IncentX undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.

Question 6

Can I get IncentX's SOC 2 report?

Accepted Answer

IncentX's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 7

Does IncentX have a penetration test report?

Accepted Answer

IncentX publishes a penetration test summary on its trust center. You can request access to it through SOC2C.

Question 8

Is IncentX secure?

Accepted Answer

Security isn't a single yes/no, but IncentX is SOC 2 Type II compliant and holds SOC 2 Type II, PCI DSS, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 9

Does IncentX have a bug bounty or vulnerability disclosure program?

Accepted Answer

IncentX hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@incentx.com or via a /security page (IncentX lists a security contact).

Question 10

Who are IncentX's subprocessors?

Accepted Answer

IncentX lists 9 subprocessors on its trust center, including Amazon Web Services, GitHub Enterprise Managed User (OIDC), Vanta, Twilio, Jira. Buyers use this for fourth-party risk review.

Question 11

Where does IncentX host or store data?

Accepted Answer

IncentX hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information. Data residency details are on its trust center.

Question 12

Where is IncentX's trust center or security page?

Accepted Answer

IncentX's trust center is at https://trust.incentx.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

IncentX

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

Octopus Deploy

1099-Prep

Ask Ai