Is this your company? Buyers are checking Kontakt.io here. Claim kontakt.io free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Kontakt.io
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Kontakt.io is SOC 2 Type II compliant. Kontakt.io also holds HIPAA.
About
As a leader in Indoor Journey Analytics, [Kontakt.io](http://kontakt.io/) optimizes processes and resources by revealing how customers move through your business. Using RTLS, IoT, and AI, we uncover waste, streamline capacity, and help your customers and staff have a better day. Encompassing IoT devices & tags, cloud computing, and web applications, [Kontakt.io](http://kontakt.io/) offers a full spectrum of solutions for healthcare, workspace, and other industries.
Compliance & infrastructure
Compliance leadership
The person who leads Kontakt.io's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Kontakt.io's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
4/11 details · 36%SOC2C shows the verified essentials. 7 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- SubprocessorsList your subprocessors so buyers can assess fourth-party risk, the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Kontakt.io SOC 2 compliant?
Kontakt.io is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Kontakt.io HIPAA compliant?
According to Kontakt.io's public trust center, Kontakt.io is HIPAA compliant. On SOC2C this listing is Listed.
Is Kontakt.io SOC 2 Type I or Type II?
Kontakt.io is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Kontakt.io's SOC 2 for a vendor risk assessment?
Yes. Kontakt.io's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Kontakt.io penetration tested?
Kontakt.io hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Kontakt.io secure?
Security isn't a single yes/no, but Kontakt.io is SOC 2 Type II compliant and holds SOC 2 Type II, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Kontakt.io have a bug bounty or vulnerability disclosure program?
Kontakt.io hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@kontakt.io or via a /security page (Kontakt.io lists a security contact).
Who are Kontakt.io's subprocessors?
Kontakt.io's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Kontakt.io host or store data?
Kontakt.io's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Kontakt.io's trust center or security page?
Kontakt.io's trust center is at https://trust.kontakt.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Kontakt.io
Reproduced from Kontakt.io's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
How to update a Portal Light 2 certificate
https://support.kontakt.io/hc/en-gb/articles/19634218843420-April-2025-Technical-Bulletin-Portal-Light-2-certificate-update
Is there an individual that has information security as their primary duty, with responsibility for maintaining the security and privacy programs and ensuring compliance?
Lemlem Kentiba | Security and Compliance Officer | Email Address: l.kentiba@kontakt.io John Turek | CTO | Email Address: moose@kontakt.io
Do you require contractors, vendors, outsourcing ventures, or other external third-party contracts to comply with policies and customer agreements?
Yes, all contractors, vendors, and third-party partners are required to comply with our policies and customer agreements.
Does your company have formal written security policies and procedures which is approved by management, published and communicated as appropriate to all employees?
Kontakt.io has formal written security policies and procedures that are approved by management, communicated to all employees, and each employee is required to review, sign, and accept each policy.
Are your written information security policies and procedures reviewed at least annually to ensure its continuing adequacy and effectiveness?
Our written information security policies and procedures are reviewed at least annually to ensure their adequacy and effectiveness.
Do you have a User Security Awareness Training program for all employee's and where relevant, contractors and third party users? If yes, how often?
Yes, we have a User Security Awareness Training program in place for all employees, and where applicable, for contractors and third-party users. The training is conducted annually and includes regular updates or refresher courses as needed.
Do you have a data retention / archiving policy?
Our data retention policy outlines how long different types of data are retained based on legal, regulatory, and business requirements. Data is securely archived and disposed of when it is no longer needed, in accordance with defined retention schedules.
Do you have a formal process in place that ensures all employees, contractors and third party users that may have access to customer information, surrender all of the organization's assets in their possession upon termination of their employment, contract or agreement?
Yes, we have a formal off-boarding process in place to ensure that all employees, contractors, and third-party users return all organizational assets upon termination of their employment, contract, or agreement. This includes company-issued devices, access cards, documents, and the revocation of system access to protect customer information and organizational data.
Does the system provide audit logs/error logs to detect unauthorized access or activity?
Our system provides detailed audit and error logs that track all user activities, system events, and access attempts. These logs help detect unauthorized access or suspicious activity, ensuring that any potential security breaches can be quickly identified and addressed.
Describe the remote access methods you currently employ and support for your application and how you would support devices at remote locations.
For remote devices, we ensure secure connectivity and continuous support through robust authentication, encryption, and real-time monitoring to safeguard both data and access.
Do you have a third party perform penetration testing?
Kontakt.io engages independent third-party security firms to perform regular penetration testing of its systems. These assessments are part of our broader security program designed to identify and remediate vulnerabilities proactively. Findings from penetration tests are reviewed and addressed through structured remediation plans to ensure continuous security improvement. This process complements our SOC 2 Type 2 compliance and reinforces our commitment to robust cybersecurity practices.
Do you have Cyber Insurance?
Kontakt.io maintains comprehensive cyber liability insurance as part of its risk management framework.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public