Is this your company? Buyers are checking Pendula Solutions Pty Ltd here. Claim pendula.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Pendula Solutions Pty Ltd
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Pendula Solutions Pty Ltd is SOC 2 Type II compliant. Pendula Solutions Pty Ltd also holds ISO 27001, and HIPAA.
About
Pendula is a Customer Engagement Platform that combines a powerful no-code workflow studio. Layered with living and historical customer data, on the spot market and competitive insights, as well as real-time sentiment analysis - Pendula allows businesses to build unsurpassed 1-1 experiences with their customers at scale, building lifelong loyalty and unprecedented Customer Lifetime Value. Pendula was founded in 2016 and is headquartered in Sydney Pendula organisation operates from AWS regions in the US, UK and Australia with all customer data staying in the AWS environment in the selected regi
Compliance & infrastructure
Hosting
AWS
Subprocessors
11- AAuth0 · Authentication to Pendula platformAU, UK or US based on customer choice
- AAmazon Web Services · Cloud hosting all compute and storage infrastructure.AU, UK or US based on customer choice
- GGitHub · Source code managementN/A
- DDatadog · Log management and storageUS
- PPulumi · Infrastructure as CodeN/A
- PPagerDuty · Cloud monitoring and response
- OOkta · All Authentication not directly used by customers.US
- SSnyk · Vulnerability ScanningN/A
- TTeleport · Privileged Access ManagementSIngapore
- TTwilio · Messaging ServicesVarious (depends on SMS destination)
- OOpenAI - Customer · EngineeringUS
Compliance leadership
The person who leads Pendula Solutions Pty Ltd's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Pendula Solutions Pty Ltd's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
FAQ Added and Security White Paper uploadedJan 2025
Pendula has added more documentation on its security included a white paper summary of its environment and an FAQ based on some of the questions from Pendula's entry on the CSA CAIQ
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Pendula Solutions Pty Ltd SOC 2 compliant?
Pendula Solutions Pty Ltd is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Pendula Solutions Pty Ltd ISO 27001 certified?
According to Pendula Solutions Pty Ltd's public trust center, Pendula Solutions Pty Ltd is ISO 27001 certified. On SOC2C this listing is Listed.
Is Pendula Solutions Pty Ltd HIPAA compliant?
According to Pendula Solutions Pty Ltd's public trust center, Pendula Solutions Pty Ltd is HIPAA compliant. On SOC2C this listing is Listed.
Is Pendula Solutions Pty Ltd SOC 2 Type I or Type II?
Pendula Solutions Pty Ltd is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Pendula Solutions Pty Ltd's SOC 2 for a vendor risk assessment?
Yes. Pendula Solutions Pty Ltd's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Pendula Solutions Pty Ltd penetration tested?
Pendula Solutions Pty Ltd hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Pendula Solutions Pty Ltd secure?
Security isn't a single yes/no, but Pendula Solutions Pty Ltd is SOC 2 Type II compliant and holds ISO 27001, HIPAA, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Pendula Solutions Pty Ltd have a bug bounty or vulnerability disclosure program?
Pendula Solutions Pty Ltd hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@pendula.com or via a /security page (Pendula Solutions Pty Ltd lists a security contact).
Who are Pendula Solutions Pty Ltd's subprocessors?
Pendula Solutions Pty Ltd lists 11 subprocessors on its trust center, including Auth0, Amazon Web Services, GitHub, Datadog, Pulumi. Buyers use this for fourth-party risk review.
Where does Pendula Solutions Pty Ltd host or store data?
Pendula Solutions Pty Ltd hosts on AWS. Data residency details are on its trust center.
Where is Pendula Solutions Pty Ltd's trust center or security page?
Pendula Solutions Pty Ltd's trust center is at https://trust.pendula.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
How are Pendula's FAQ's organised and what is the source of the questions.
Pendula's FAQs are drawn from questions that are commonly asked from questions, questions from the CSA CAIQ and from the controls implementation guidance for ISO 27001. The grouping of the questions aligns with the ISO 27002:2013. There is one section "Pendula Platform Security Features" which describes Pendula specific security features and architecture.
Are there any material claims or judgements against the company?
No
Has the company suffered Data Loss or Security Breach within the last 3 years
No
Are information governance program policies and procedures sponsored by Pendula’s leadership established, documented, approved, communicated, applied, evaluated, and maintained? Are the policies and procedures reviewed and updated at least annually?
Pendula's senior management team forms Pendula Information Security Management System (ISMS) Governance Council (GC). The ISMS-GC is responsible for establishing, approving and communicating Pendula's information security policies. Pendula's information security policies are reviewed and published whenever major changes occur or on annual basis. All Pendula team members are expected to review all relevant policies on an annual basis.
Does Pendula have an established formal, documented, and leadership-sponsored enterprise risk management (ERM) program that includes policies and procedures for identification, evaluation, ownership, treatment, and acceptance of cloud security and privacy risks?
Pendula's Enterprise Risk Management (ERM) is described in its ISMS policy documents and its risk register is maintained in Vanta. The risks are all reviewed as part of Pendula's ISMS-GC reviews.
Are the policies and procedures reviewed and updated at least annually?
Pendula's information security policies are reviewed and published whenever major changes occur or on annual basis. All Pendula team members are expected to review all relevant policies on an annual basis.
Is the ERM program that has been approved by management, communicated to appropriate constituents and an assigned owner to maintain and review the program?
Pendula’s risk management policy and procedures are document as part of its ISMS and externally audited as part of Pendula’s ISO 27001 and SOC2 certifications. This includes the communication and acceptance of the risk management procedures by all team members which is recorded in Vanta. Pendula’s Head of Security conducts risk review activities with heads of departments on an annual basis to ensure that risks that have not been discovered during the course of normal operations are added to the risk register.
Does Pendula have compliance procedures in place to ensure the Information Security Policy is read, understood, and implemented by the staff?
Pendula’s maintains a record of the review and acceptance of all information security policies in Vanta. This acceptance is subject to annual third party audit review.
Do exceptions to Pendula’s information security policies require an approval process?
All of Pendula’s security policies have an exception process that requires Pendula’s CEO or COO to approve the exception. The exceptions are written up as risks into Pendula’s Vanta risk registry with an owner and a treatment plan. All new risks are presented at Pendula’s quarterly ISMS Governance Council meetings.
Are the roles and responsibilities for planning, implementing, operating, assessing, and improving governance programs defined and documented as part of Pendula’s ISMS?
Pendula’s ISMS documents the responsibilities of the individuals and teams who manage and implement Pendula’s ISMS.
Are all relevant standards, regulations, legal/contractual, and statutory requirements applicable to Pendula identified and documented?
Pendula has documented the relevant standards, regulations, legal/contractual, and statutory requirements applicable to its operations as part of its ISMS and reviews them in its ISMS-GC reviews.
Is an audit management process defined and implemented to support audit planning, risk analysis, security control assessments, conclusions, remediation schedules, report generation, and reviews of past reports and supporting evidence?
Pendula’s conducts internal audits, audits of key systems (AWS), and external audits for ISO 27001 and SOC2. The results of audits are reviewed by the ISMS-GC as part of quarterly security review processes.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public