Is this your company? Buyers are checking K15t here. Claim k15t.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
K15t
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
K15t is SOC 2 Type II compliant. K15t also holds ISO 27001, and GDPR.
About
We're K15t, an Atlassian Platinum Marketplace Partner from Stuttgart, Germany. Our mission? To help teams share knowledge easily, wherever it's needed. Since 2009, we've developed Confluence and Jira apps trusted by over 8,700 organizations worldwide. With more than 24,000 active installs on the Atlassian Marketplace, we build solutions that enable teams to take their knowledge in Confluence and Jira and share it with the world. We know that sharing knowledge starts with trust. That’s why your data's security and privacy are a top priority for us. In this Trust Center, you’ll find a transparen
Compliance & infrastructure
Hosting
AWS
Documents
8POLICIES
Subprocessors
8- AAmazon Web Services · We use AWS to host our Cloud apps and Product Analytics service.Seattle, USA; Frankfurt, Germany
- AActive Campaign · We use ActiveCampaign to send informational email when you evaluate or buy a newChicago, USA
- SSentry · We use Sentry for real-time error tracking of our Cloud Apps' resources executedSan Francisco, USA
- GGoogle Workspace · We use Google Gmail for sending and receiving emails. This includes incoming andDublin, Ireland
- SSegment · We use Segment to collect data on how our apps are used.San Francisco, USA
- kk15t support (JSM) · We use Jira Service Management from Atlassian for the creation, tracking and adm
- JJira · We use Jira Software Cloud for tracking software development and task management
- CConfluence Access Control · We use Atlassian Confluence Cloud for the internal documentation of customer use
Compliance leadership
The person who leads K15t's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. K15t's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is K15t SOC 2 compliant?
K15t is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is K15t ISO 27001 certified?
According to K15t's public trust center, K15t is ISO 27001 certified. On SOC2C this listing is Listed.
Is K15t GDPR compliant?
According to K15t's public trust center, K15t is GDPR compliant. On SOC2C this listing is Listed.
Is K15t SOC 2 Type I or Type II?
K15t is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use K15t's SOC 2 for a vendor risk assessment?
Yes. K15t's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is K15t penetration tested?
K15t hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get K15t's SOC 2 report?
K15t's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is K15t secure?
Security isn't a single yes/no, but K15t is SOC 2 Type II compliant and holds ISO 27001, GDPR, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does K15t have a bug bounty or vulnerability disclosure program?
K15t hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@k15t.com or via a /security page (K15t lists a security contact).
Who are K15t's subprocessors?
K15t lists 8 subprocessors on its trust center, including Amazon Web Services, Active Campaign, Sentry, Google Workspace, Segment. Buyers use this for fourth-party risk review.
Where does K15t host or store data?
K15t hosts on AWS. Data residency details are on its trust center.
Where is K15t's trust center or security page?
K15t's trust center is at https://trust.k15t.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Where is customer data stored, and what data is stored?
Our apps are listed in the Atlassian Marketplace, and you can find relevant information under the 'Privacy & Security' tab of each respective app.
Where can I find your Data Processing Addendum (DPA)?
Please find our Data Processing Addendum here.
Where can I find your technical and organizational measures?
Please find our technical and organizational measures here.
What security and compliance certifications do you hold?
We are ISO/IEC 27001:2022 compliant and are currently in the process of obtaining our SOC 2 Type II compliance.
Do you perform Internal Audits?
Yes, we perform Internal Audits annually.
Do you have an incident response plan in place?
Yes, we follow an incident response plan.
What is your response time for security incidents?
The response time is based on the severity of the incident: For major incidents, our response time is within 30 to 60 minutes.
Do you have a status page?
Yes, here is the status page .
How do you ensure secure authentication with third-party vendors?
We categorize vendors by criticality and enforce appropriate authentication mechanisms, such as MFA for critical and high-risk vendors.
Who can I contact if I have a security concern?
You can contact security@k15t.com.
What's your SLA/response time in case of technical issues?
We will respond in no more than 24 business hours from the time of your request. You can find all information about our SLA here.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public