Persefoni security & compliance
An overview of Persefoni's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, ISO 27001, ISO 27017, CSA STAR, PCI DSS
Penetration testNot listed
Subprocessors25 listed
HostingAWS
Trust centerView
Security questions about Persefoni
- Is Persefoni secure?
- Security isn't a single yes/no, but Persefoni is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 27017, CSA STAR, PCI DSS. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does Persefoni have a bug bounty or vulnerability disclosure program?
- Persefoni hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@persefoni.com or via a /security page (Persefoni lists a security contact).
- Who are Persefoni's subprocessors?
- Persefoni lists 25 subprocessors on its trust center, including Amazon Web Services, Arcadia (Urjanet), Auth0, Databricks, Google. Buyers use this for fourth-party risk review.
- Where does Persefoni host or store data?
- Persefoni hosts on AWS, and handles Customer personally identifiable information, Credit card information, Personal health information, First names, last names, and business email addresses of Persefoni CMAP users.. Data residency details are on its trust center.
- Where is Persefoni's trust center or security page?
- Persefoni's trust center is at https://trust.persefoni.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.