SOC2C

Pipe security & compliance

An overview of Pipe's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II
Penetration testNot listed
Subprocessors6 listed
HostingGCP
Trust centerView

Security questions about Pipe

Is Pipe secure?
Security isn't a single yes/no, but Pipe is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Pipe have a bug bounty or vulnerability disclosure program?
Pipe hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@pipe.com or via a /security page (Pipe lists a security contact).
Who are Pipe's subprocessors?
Pipe lists 6 subprocessors on its trust center, including Cloudflare, Google Cloud Platform, Datadog, Salesforce, Slack. Buyers use this for fourth-party risk review.
Where does Pipe host or store data?
Pipe hosts on GCP. Data residency details are on its trust center.
Where is Pipe's trust center or security page?
Pipe's trust center is at https://trust.pipe.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Pipe's full SOC 2 profile →