Is this your company? Buyers are checking MobileAction here. Claim mobileaction.co free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
MobileAction
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
MobileAction is SOC 2 Type II compliant. MobileAction also holds GDPR.
About
MobileAction is a pioneer in app analytics and the growth partner of apps and games for organic and paid user acquisition. It is the go-to platform for app marketers aiming for the top charts on the App Store and the Google Play Store. Compliant with SOC 2 and GDPR, we strive to uphold the highest compliance standards in the alternative data market. We understand that our customers trust us, and we have invested significantly in people, processes, and technologies to ensure that we exceed their expectations and industry standards. Our Trust & Assurance page is designed to showcase our commitme
Compliance & infrastructure
Hosting
AWSGCP
Data handled
Customer personally identifiable informationCredit card informationPersonal health informationApple Searchads data (if integrated)Apple Appstore Connect data (if integrated)Google Play Console data (if integrated)Mobile Action Users' personally identifiable information
Documents
21POLICIES
- Access Control and Password PolicyRequest
- Business Continuity and Disaster Recovery PlanRequest
- Code of ConductRequest
- Data Management and Information Classification PolicyRequest
- Incident Response PlanRequest
- Information Security Policy (AUP)Request
- Information Security Roles and ResponsibilitiesRequest
- Secure Development PolicyRequest
- Human Resource Security PolicyRequest
- Operations Security PolicyRequest
- Cryptography PolicyRequest
- Physical Security PolicyRequest
- Asset Management PolicyRequest
- Risk Management PolicyRequest
- Third-Party Management PolicyRequest
Subprocessors
22- AAmazon Web Services · Cloud ProviderUSA
- GGoogle Workspace · CommunicationUSA
- SSegment · Data analyticsUSA
- MMixpanel · TrackerUSA
- FFullStory · TrackerUSA
- HHeroku · Cloud ProviderUSA
- HHubspot · SalesUSA
- JJira · EngineeringUSA
- QQuickbooks · FinanceUSA
- SSendgrid · Engineering & MarketingUSA
- SSendwithus · EngineeringUSA
- SSentry · EngineeringUSA
Show all 22 subprocessorsShow fewer
- SStripe · FinanceUSA
- CClickHouse Cloud · EngineeringUSA
- TTableau · EngineeringUSA
- GGong · SalesUSA
- BBugsnag · EngineeringUSA
- SSlack · CommunicationUSA
- GGoogle Cloud Platform · Cloud providerUSA
- OOpenAI · EngineeringUSA
- AAnthropic · EngineeringUSA
- KKnock · EngineeringUSA
Compliance leadership
The person who leads MobileAction's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. MobileAction's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is MobileAction SOC 2 compliant?
MobileAction is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is MobileAction GDPR compliant?
According to MobileAction's public trust center, MobileAction is GDPR compliant. On SOC2C this listing is Listed.
Is MobileAction SOC 2 Type I or Type II?
MobileAction is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use MobileAction's SOC 2 for a vendor risk assessment?
Yes. MobileAction's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is MobileAction penetration tested?
MobileAction hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get MobileAction's SOC 2 report?
MobileAction's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is MobileAction secure?
Security isn't a single yes/no, but MobileAction is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does MobileAction have a bug bounty or vulnerability disclosure program?
MobileAction hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@mobileaction.co or via a /security page (MobileAction lists a security contact).
Who are MobileAction's subprocessors?
MobileAction lists 22 subprocessors on its trust center, including Amazon Web Services, Google Workspace, Segment, Mixpanel, FullStory. Buyers use this for fourth-party risk review.
Where does MobileAction host or store data?
MobileAction hosts on AWS, GCP, and handles Customer personally identifiable information, Credit card information, Personal health information, Apple Searchads data (if integrated). Data residency details are on its trust center.
Where is MobileAction's trust center or security page?
MobileAction's trust center is at https://trust.mobileaction.co. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
What security measures do you have in place to protect sensitive data?
We have implemented several security measures to protect sensitive data, including firewalls, encryption, multi-factor authentication, intrusion detection and prevention systems, regular vulnerability assessments, third-party audits, and third-party certifications. MobileAction Inc. completed the AICPA Service Organization Control (SOC) 2 Type II audit.
How do you ensure the confidentiality of customer information?
We employ strict role-based access controls and encryption technologies to ensure the confidentiality of customer information. Our employees undergo regular security training to help prevent unauthorized access or disclosure of sensitive information.
Do you conduct regular security audits?
We conduct regular security audits to identify and address system and process vulnerabilities. These audits include penetration testing, vulnerability assessments, and internal and external security reviews. We comply with SOC-2 Type-2 requirements.
How does MobileAction Inc. ensure the security of its cloud services?
Our Cloud services utilize robust encryption for data at rest and in transit, continuous security monitoring, and leverage native security features of our cloud providers. We implement stringent access controls to ensure data integrity and privacy.
What certifications does MobileAction Inc. hold to validate its security practices?
MobileAction Inc. has achieved SOC 2 Type II certification, confirming that our security practices and controls meet high standards as verified by Prescient Assurance, a leader in compliance certifications.
How often does MobileAction Inc. conduct security training and testing?
Security training is an integral part of our culture. To address current and emerging security threats, we conduct annual secure development training and regular security awareness sessions for all relevant personnel.
Business & Industrial peers that completed SOC 2
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public