Question 1

Is PhoneBurner SOC 2 compliant?

Accepted Answer

PhoneBurner is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is PhoneBurner PCI DSS compliant?

Accepted Answer

According to PhoneBurner's public trust center, PhoneBurner is PCI DSS compliant. On SOC2C this listing is Listed.

Question 3

Is PhoneBurner SOC 2 Type I or Type II?

Accepted Answer

PhoneBurner is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use PhoneBurner's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. PhoneBurner's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is PhoneBurner penetration tested?

Accepted Answer

PhoneBurner hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Can I get PhoneBurner's SOC 2 report?

Accepted Answer

PhoneBurner's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 7

Is PhoneBurner secure?

Accepted Answer

Security isn't a single yes/no, but PhoneBurner is SOC 2 Type II compliant and holds SOC 2 Type II, PCI DSS. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does PhoneBurner have a bug bounty or vulnerability disclosure program?

Accepted Answer

PhoneBurner hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@phoneburner.com or via a /security page (PhoneBurner lists a security contact).

Question 9

Who are PhoneBurner's subprocessors?

Accepted Answer

PhoneBurner lists 3 subprocessors on its trust center, including Amazon Web Services, Trestleiq, FullStory, Inc.. Buyers use this for fourth-party risk review.

Question 10

Where does PhoneBurner host or store data?

Accepted Answer

PhoneBurner hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.

Question 11

Where is PhoneBurner's trust center or security page?

Accepted Answer

PhoneBurner's trust center is at https://trust.phoneburner.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

What is a SOC 2 examination?

Accepted Answer

A SOC 2 examination provides organizations with a report on their internal controls and how they protect customer data and sensitive information. It is the standard for data security among digital companies in the U.S.

Question 13

Can I get a copy of the report?

Accepted Answer

Yes. You can request access to our Soc 2 Type II report in the “Documents” section above.

Question 14

What did this process look like?

Accepted Answer

An independent auditor, Insight Assurance, conducted the detailed examination. Through this process, PhoneBurner demonstrated its adherence to data security, availability, and confidentiality standards developed by the American Institute of Certified Public Accountants (AICPA).

Question 15

Why should you work with a SOC 2 Type 2 certified company?

Accepted Answer

With SOC 2 recognition, PhoneBurner not only protects the safety of its customers’ data today but demonstrates that it has set the right standards in place for the future. Many companies looking for a digital software provider need to conduct an independent audit before selecting a partner. As a SOC 2 Type 2 certified company a regular audit is already in place and can be requested at any time.

Question 16

How Can I Request A Security Audit?

Accepted Answer

PhoneBurner is independently audited each year by an independent audit firm for SOC 2 Type 2 compliance. Due to this process, we don't allow customers or prospective customers to run their own audits, but instead direct them to our Trust Center for information about PhoneBurner's security practices.

PhoneBurner

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Technology peers that completed SOC 2

Action1

ELJUN LLC

equipifi

IntelligentSystems Corp