Is this your company? Buyers are checking Permutive here. Claim permutive.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Permutive
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Permutive is SOC 2 Type II compliant.
About
Permutive’s Audience Activation Platform is engineered to empower over 150 leading media companies, advertisers, and agencies to achieve superior outcomes through advanced data utilisation. Our platform seamlessly unifies, manages, and activates publisher signals in real-time, ensuring precise audience targeting across both Direct and Programmatic channels.
Compliance & infrastructure
Hosting
GCP
Data handled
Credit card informationPersonal health informationEmployee personal dataCustomer Data
Documents
5Subprocessors
2- AAuth0 · Identity provider
- GGoogle Cloud Platform · Infrastructure Hosting
Compliance leadership
The person who leads Permutive's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Permutive's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Permutive SOC 2 compliant?
Permutive is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Permutive SOC 2 Type I or Type II?
Permutive is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Permutive's SOC 2 for a vendor risk assessment?
Yes. Permutive's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Permutive penetration tested?
Permutive hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Does Permutive have a SOC 3 report?
Permutive publishes a SOC 3 report, which is publicly shareable. Request access through SOC2C.
Can I get Permutive's SOC 2 report?
Permutive's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is Permutive secure?
Security isn't a single yes/no, but Permutive is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Permutive have a bug bounty or vulnerability disclosure program?
Permutive hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@permutive.com or via a /security page (Permutive lists a security contact).
Who are Permutive's subprocessors?
Permutive lists 2 subprocessors on its trust center, including Auth0, Google Cloud Platform. Buyers use this for fourth-party risk review.
Where does Permutive host or store data?
Permutive hosts on GCP, and handles Credit card information, Personal health information, Employee personal data, Customer Data. Data residency details are on its trust center.
Where is Permutive's trust center or security page?
Permutive's trust center is at https://trust.permutive.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Does Permutive have an information security programme?
Yes. Permutive has a comprehensive information security programme with policies, procedures, and dedicated teams.
Are Permutive’s vendors and partners regularly evaluated for security compliance?
Permutive regularly reviews vendor policies and conducts assessments to ensure that our vendors comply with security and data protection standards.
Does Permutive have a documented Security Awareness Program and/or provide security-related training to employees and contractors who may have access to customer data?
Yes. Permutive provides regular security-related training for employees and contractors with data access.
Does Permutive have a formal Data Protection and Privacy Program?
Yes. Permutive has an established Data Protection and Privacy Program with documented policies, technologies, and controls to safeguard customer data across its lifecycle.
Where is customer data stored?
Scoped data is stored in EU or US regions, with data residency aligned with customer requirements.
Does Permutive have a DPA?
Yes. For our customers, Permutive enters into a Data Processing Agreement (DPA)
Does Permutive provide privacy-related training to employees and contractors who may have access to customer data?
Yes. Permutive provides privacy-related training to all employees and contractors who may interact with or access customer data.
What standards guide Permutive’s security practices?
Permutive’s security practices are guided by industry-recognised frameworks, including SOC 2 Type 2 standards, which are audited and certified annually.
How often is Permutive audited for compliance?
Permutive undergoes third-party audits annually to ensure our security controls remain effective and aligned with industry standards.
Does Permutive conduct 3rd party penetration tests?
Yes. Permutive conducts annual penetration tests on its platform, including our Dashboard and APIs.
Do you encrypt data at rest?
Yes. Data is encrypted at rest with AES-256, compliant with NIST standards.
Do you encrypt data in transit?
Yes. Data is encrypted in transit using TLS 1.2 and above.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public