Question 1

Is Kinsta SOC 2 compliant?

Accepted Answer

Kinsta is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Kinsta ISO 27001 certified?

Accepted Answer

According to Kinsta's public trust center, Kinsta is ISO 27001 certified. On SOC2C this listing is Listed.

Question 3

Is Kinsta ISO 27017 certified?

Accepted Answer

According to Kinsta's public trust center, Kinsta is ISO 27017 certified. On SOC2C this listing is Listed.

Question 4

Is Kinsta ISO 27018 certified?

Accepted Answer

According to Kinsta's public trust center, Kinsta is ISO 27018 certified. On SOC2C this listing is Listed.

Question 5

Is Kinsta CSA STAR certified?

Accepted Answer

According to Kinsta's public trust center, Kinsta is CSA STAR certified. On SOC2C this listing is Listed.

Question 6

Is Kinsta GDPR compliant?

Accepted Answer

According to Kinsta's public trust center, Kinsta is GDPR compliant. On SOC2C this listing is Listed.

Question 7

Is Kinsta CCPA compliant?

Accepted Answer

According to Kinsta's public trust center, Kinsta is CCPA compliant. On SOC2C this listing is Listed.

Question 8

Is Kinsta SOC 2 Type I or Type II?

Accepted Answer

Kinsta is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 9

Can I use Kinsta's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Kinsta's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 10

Is Kinsta penetration tested?

Accepted Answer

Kinsta hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 11

Does Kinsta have an ISO 27001 certificate?

Accepted Answer

Kinsta publishes an ISO certificate on its trust center; you can request access through SOC2C.

Question 12

Can I get Kinsta's SOC 2 report?

Accepted Answer

Kinsta's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 13

Is Kinsta secure?

Accepted Answer

Security isn't a single yes/no, but Kinsta is SOC 2 Type II compliant and holds ISO 27001, ISO 27017, ISO 27018, SOC 2 Type II, CSA STAR, GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 14

Does Kinsta have a bug bounty or vulnerability disclosure program?

Accepted Answer

Kinsta hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@kinsta.com or via a /security page (Kinsta lists a security contact).

Question 15

Who are Kinsta's subprocessors?

Accepted Answer

Kinsta lists 10 subprocessors on its trust center, including Cloudflare, Google Cloud Platform, Oracle America, Inc., Amazon Web Services (AWS), Clickhouse, Inc.. Buyers use this for fourth-party risk review.

Question 16

Where does Kinsta host or store data?

Accepted Answer

Kinsta hosts on AWS, GCP. Data residency details are on its trust center.

Question 17

Where is Kinsta's trust center or security page?

Accepted Answer

Kinsta's trust center is at https://trust.kinsta.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 18

If I request access to Kinsta's SOC 2 or another document on this page, when will I receive access?

Accepted Answer

Our team strives to review all access requests within one business day. If you requested access more than one business day ago and have not receive an email granting you access you may contact [sales@kinsta.com](mailto:sales@kinsta.com) for more information.

Question 19

Does Kinsta have a Privacy Policy or Data Processing Addendum?

Accepted Answer

Yes, you can access these documents at the following links: - Kinsta Inc. Privacy Policy - Kinsta Inc. Data Processing Addendum You may also access these documents, and all of Kinsta's legal documents, by visiting our Legal page.

Question 20

Do Kinsta’s SOC 2 report, ISO certifications, and CSA STAR Level 1 cover Sevalla?

Accepted Answer

Yes! Sevalla was officially launched after Kinsta’s latest SOC 2 Type II observation period, so it is not specifically named in the report. However, Sevalla's core service offerings of application hosting, database hosting, and static site hosting, as well its underlying system architecture were in-scope for SOC 2, ISO 27001, ISO 27017, ISO 27018, and CSA STAR.

Kinsta

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Technology peers that completed SOC 2

Action1

ELJUN LLC

equipifi

IntelligentSystems Corp