Is this your company? Buyers are checking Level365 here. Claim level365.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Level365
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Level365 is SOC 2 Type II compliant. Level365 also holds HIPAA.
About
Level365’s infrastructure has been architected with security in mind, built from the ground up following the CIS Benchmarks and NIST guidance for infrastructure, server OS, and application hardening and maintenance This helps us ensure that we are delivering the best UCaaS possible in the most secure way. You may select the Request Access option above to obtain our audit reports and additional resource documentation. Please contact us if you have any questions or concerns.
Compliance & infrastructure
Documents
4Compliance leadership
The person who leads Level365's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Level365's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
5/11 details · 45%SOC2C shows the verified essentials. 6 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- SubprocessorsList your subprocessors so buyers can assess fourth-party risk, the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Level365 SOC 2 compliant?
Level365 is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Level365 HIPAA compliant?
According to Level365's public trust center, Level365 is HIPAA compliant. On SOC2C this listing is Listed.
Is Level365 SOC 2 Type I or Type II?
Level365 is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Level365's SOC 2 for a vendor risk assessment?
Yes. Level365's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Level365 penetration tested?
Level365 hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get Level365's SOC 2 report?
Level365's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is Level365 secure?
Security isn't a single yes/no, but Level365 is SOC 2 Type II compliant and holds SOC 2 Type I, SOC 2 Type II, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Level365 have a bug bounty or vulnerability disclosure program?
Level365 hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@level365.com or via a /security page (Level365 lists a security contact).
Who are Level365's subprocessors?
Level365's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Level365 host or store data?
Level365's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Level365's trust center or security page?
Level365's trust center is at https://trust.level365.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Level365
Reproduced from Level365's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
What does being SOC 2 compliant mean?
The SOC 2 (Service Organization Control 2) report validates the effectiveness of operating controls as a service organization against the criteria set forth by the American Institute of Certified Public Accountants (AICPA) Trust Services Principles. Level365 undergoes a third-party audit to certify our services against this standard. Additional information can be found here.
What is the timing of the SOC 2 audits?
SOC 2 reports cover controls around the availability, security, and confidentiality of customer data over a period of time. SOC 2 Type I audits examine controls at a single point. The SOC 2 Type II audit, which Level365 completes, oversees several months. Level365 maintains these controls year-round and provides evidence to the third-party auditor during the observation window. Security is very important to us and you don't have to just take our word for it.
Are Level365 services HIPAA compliant?
Yes. Level365 UCaaS can be used in a HIPAA-compliant manner. Please review the guidelines available on our support help desk. Level365 HIPAA Use Guidelines
Does Level365 support Single Sign On (SSO) and Multi-Factor Authentication (MFA)?
Yes. Level365 supports both SSO and MFA to enhance account security and simplify authentication. • SSO allows users to sign in using their existing Google or Microsoft credentials. • MFA adds an additional verification step to help protect accounts from unauthorized access. For setup instructions and more details, please see the following articles: Using Single Sign-On (SSO) Utilizing Multi-factor Authentication (MFA)
What is Level365's service reliability and how are users notified of any issues?
The Level365 UCaaS platform is engineered from the ground up for reliability. We utilize redundancy at every level, from redundant power supplies to clustered servers, spanning multiple geographically separate data centers and voice providers. With an annual uptime of 99.995% (26 minutes of downtime a year) or better, we deliver. Please subscribe to our Status Page for updates and information regarding uptime, incidents, and scheduled maintenance.
Are my calls secure with Level365?
Level365 offers TLS and SRTP, enabling the highest cryptographically secure encryption in the industry. Combined with Session Border Controllers at the edge and a properly configured LAN, you can take comfort in knowing that all of your communications are secure.
Is Level365 PCI compliant?
Yes. Level365 services can be used to meet PCI requirements. PCI (Payment Card Industry) standards specifically focus on protecting consumer credit card information. If a Level365 client records telephone calls and collects credit card details over the phone, agents can pause and resume the recording during the payment process to maintain compliance.
I found a security bug. Do you have an established bug bounty program?
Level365 has partnered with Federacy to manage our Vulnerability Disclosure Program. We take security extremely seriously, and welcome ethical research and disclosure as part of our Vulnerability Disclosure Program. More details can be found here.
Technology peers that completed SOC 2
Action1
action1.com · United States · Technology
SOC 2 Type IIRenewal not public
ELJUN LLC
eljunllc.com · United States · Technology
SOC 2 Type IIRenewal not public
equipifi
equipifi.com · United States · Technology
SOC 2 Type IIRenewal not public
IntelligentSystems Corp
hyperbound.ai · United States · Technology
SOC 2 Type IRenewal not public