SOC2C

Kodi security & compliance

An overview of Kodi's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 · Listed
FrameworksISO 27001
Penetration testNot listed
Subprocessors6 listed
HostingAWS
Trust centerView

Security questions about Kodi

Is Kodi secure?
Security isn't a single yes/no, but Kodi is SOC 2 compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Kodi have a bug bounty or vulnerability disclosure program?
Kodi hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@kodi.is or via a /security page (Kodi lists a security contact).
Who are Kodi's subprocessors?
Kodi lists 6 subprocessors on its trust center, including Amazon Web Services, Bitbucket, Google Workspace, Jira, Vanta. Buyers use this for fourth-party risk review.
Where does Kodi host or store data?
Kodi hosts on AWS. Data residency details are on its trust center.
Where is Kodi's trust center or security page?
Kodi's trust center is at https://trust.kodi.is. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Kodi's full SOC 2 profile →