Is this your company? Buyers are checking Ozone API here. Claim ozoneapi.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Ozone API
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Ozone API is SOC 2 Type II compliant. Ozone API also holds ISO 27001.
About
Ozone API empowers banks and financial institutions to adapt and thrive in the new world of open finance. We provide technology that delivers compliant open APIs and goes beyond, to monetize open banking globally.
Compliance & infrastructure
Hosting
AWSAzure
Documents
23Documents
- Access Control PolicyRequest
- Asset Management PolicyRequest
- Business Continuity and Disaster Recovery PlanRequest
- Code of ConductRequest
- Cryptography PolicyRequest
- Data Management PolicyRequest
- Human Resource Security PolicyRequest
- Incident Response PlanRequest
- Information Security Policy (AUP)Request
- Information Security Roles and ResponsibilitiesRequest
- Operations Security PolicyRequest
- Physical Security PolicyRequest
- Third-Party Management PolicyRequest
- Anti-Bribery & Corruption PolicyRequest
- Anti Slavery PolicyRequest
- Conflict of Interest PolicyRequest
- Environmental, Social and Governance PolicyRequest
- Privacy Management PolicyRequest
- Privacy PolicyRequest
- GDPR Compliance PolicyRequest
- Pen Test Results - Authenticated Web Application Assessment.pdfRequest
- Pen Test Results - API Assessment.pdfRequest
- Ozone Financial Technology Limited - SOC2 Report.pdfRequest
Subprocessors
13- AAmazon Web Services · Cloud provider
- MMicrosoft Azure · Cloud provider
- MMongoDB Atlas · Data storage and processing
- OOkta · Identity provider
- CConfluence · Document management
- GGitHub · Version control
- GGrafana Cloud · grafana_cloud
- GGoogle Workspace · Identity provider
- JJira · Collaboration
- OOracle Cloud · oracle_cloud
- OOpsGenie
- SSlack · Collaboration
Show all 13 subprocessorsShow fewer
- VVanta · Security
Compliance leadership
The person who leads Ozone API's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Ozone API's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Ozone API SOC 2 compliant?
Ozone API is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Ozone API ISO 27001 certified?
According to Ozone API's public trust center, Ozone API is ISO 27001 certified. On SOC2C this listing is Listed.
Is Ozone API SOC 2 Type I or Type II?
Ozone API is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Ozone API's SOC 2 for a vendor risk assessment?
Yes. Ozone API's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Ozone API penetration tested?
Yes — Ozone API undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Does Ozone API have a penetration test report?
Ozone API publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Can I get Ozone API's SOC 2 report?
Ozone API's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is Ozone API secure?
Security isn't a single yes/no, but Ozone API is SOC 2 Type II compliant and holds ISO 27001, SOC 2 Type II, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Ozone API have a bug bounty or vulnerability disclosure program?
Ozone API hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@ozoneapi.com or via a /security page (Ozone API lists a security contact).
Who are Ozone API's subprocessors?
Ozone API lists 13 subprocessors on its trust center, including Amazon Web Services, Microsoft Azure, MongoDB Atlas, Okta, Confluence. Buyers use this for fourth-party risk review.
Where does Ozone API host or store data?
Ozone API hosts on AWS, Azure. Data residency details are on its trust center.
Where is Ozone API's trust center or security page?
Ozone API's trust center is at https://trust.ozoneapi.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
