Question 1

Is exec.io Pty SOC 2 compliant?

Accepted Answer

exec.io Pty is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is exec.io Pty SOC 2 Type I or Type II?

Accepted Answer

exec.io Pty is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 3

Can I use exec.io Pty's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. exec.io Pty's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 4

Is exec.io Pty penetration tested?

Accepted Answer

exec.io Pty hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 5

Can I get exec.io Pty's SOC 2 report?

Accepted Answer

exec.io Pty's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 6

Is exec.io Pty secure?

Accepted Answer

Security isn't a single yes/no, but exec.io Pty is SOC 2 Type II compliant and holds SOC 2 Type I, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 7

Does exec.io Pty have a bug bounty or vulnerability disclosure program?

Accepted Answer

exec.io Pty hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@metapulse.com or via a /security page (exec.io Pty lists a security contact).

Question 8

Who are exec.io Pty's subprocessors?

Accepted Answer

exec.io Pty lists 5 subprocessors on its trust center, including GitHub, Linear, Slack, Stripe, Google Workspace. Buyers use this for fourth-party risk review.

Question 9

Where does exec.io Pty host or store data?

Accepted Answer

exec.io Pty's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Question 10

Where is exec.io Pty's trust center or security page?

Accepted Answer

exec.io Pty's trust center is at https://trust.metapulse.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 11

How does MetaPulse encrypt data in-transit?

Accepted Answer

MetaPulse encrypts all data in transit using both HTTPS and TLS v1.2+.

Question 12

How does MetaPulse encrypt data at rest?

Accepted Answer

All datastores with customer data are encrypted at rest using AES-256 encryption.

Question 13

Where are your servers located?

Accepted Answer

MetaPulse utilizes AWS, and servers are located in US AWS availability zones.

Question 14

Is data stored in a multi-tenant environment?

Accepted Answer

MetaPulse utilized a multi-tenant environment with logical segregation of data for each client.

Question 15

Does MetaPulse have an established Security Team?

Accepted Answer

MetaPulse maintains a dedicated Security team which focuses on application, network, and system security. We employ a dedicated senior-level information security official, and engage independent third parties to regularly test and audit the security and privacy program. The team is responsible for security and privacy regulatory compliance, education, and incident response.

Question 16

Does MetaPulse have an established Incident Response Team?

Accepted Answer

MetaPulse maintains an Incident Response Team which includes members of all vitals functions across the business in order to address potential incidents in a timely manner. The Incident Response Team conducts tabletop sessions regularly and maintains a documented and organized process for handling any potential threat to the information on MetaPulse systems, computers, data, or vendor systems..

Question 17

Does MetaPulse conduct penetration tests?

Accepted Answer

MetaPulse performs, at minimum, an annual external Penetration Test. All areas of the MetaPulse product and cloud infrastructure are in-scope for these assessments, and source code is fully available to the testers in order to maximize the effectiveness and coverage.

Question 18

Do you perform regular data backups, and how are they secured?

Accepted Answer

MetaPulse has automated, scheduled backups that are performed at minimum on a daily basis. Backups are stored in the US, and maintain the same level of data encryption as our primary databases.

Question 19

Are MetaPulse employees trained on security best practices?

Accepted Answer

Security and compliance training is conducted upon hire for all employees, and we regularly engage our employees in additional training throughout the year.

Question 20

If you use third-party services, how do you vet and ensure the security of those vendors?

Accepted Answer

MetaPulse operates a formal vendor assessment program when considering any third-party service providers. We work with several third-party providers that help us provide our services to customers. We enter into contractual agreements with these partners to obligate them to comply with high levels of confidentiality and best practices in security and privacy, and we regularly review these standards and practices.

exec.io Pty

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

Octopus Deploy

1099-Prep

Ask Ai