Is this your company? Buyers are checking PlanetScale Inc. here. Claim planetscale.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
PlanetScale Inc.
Sourced from public information. Not yet verified by the company.
PlanetScale Inc. is SOC 2 Type II compliant. PlanetScale Inc. also holds PCI DSS, HIPAA, GDPR, and CCPA.
About
PlanetScale is the world’s most scalable and reliable OLTP database. Built on Vitess, our cloud platform is trusted by some of the world’s largest brands. We offer a range of [deployment options](https://planetscale.com/docs/concepts/deployment-options) including multi-tenant cloud, single-tenant, or bring your own cloud account with [PlanetScale Managed](https://planetscale.com/docs/enterprise/managed/overview).
Compliance & infrastructure
Subprocessors
20- AAmazon Web Services · Data HostingUnited States
- CClearFeed · Chat-based Customer SupportUnited States
- CClickHouse · Data hosting and analyticsUnited States
- DDatadog · Application monitoringUnited States
- FFivetran · Data synchronizationUnited States
- GGitHub · Code hostingUnited States
- GGoogle Cloud · Data Hosting, and Internal InfrastructureUnited States
- KKoala · Sales Pipeline GenerationUnited States
- OOkta · Centralized identity providerUnited States
- PPanther · Security Information & Events ManagementUnited States
- PPusher Ltd. · Real-time Notification ServiceUnited States & United Kingdom
- SSlack · Internal communicationsUnited States
Show all 20 subprocessorsShow fewer
- SStripe · Payment processingUnited States
- SSalesforce · Customer Relationship ManagementUnited States
- SSendgrid · Transactional Mail ServiceUnited States
- SSentry · Application monitoringUnited States
- SSegment · Customer AnalyticsUnited States
- VVercel · Web hostingUnited States
- WWorkOS · Single sign-on and directory syncUnited States
- ZZendesk · Cloud-based Customer SupportUnited States
Compliance leadership
The person who leads PlanetScale Inc.'s SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. PlanetScale Inc.'s penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
2025 PCI DSS reporting now availableSep 2025
PlanetScale Managed has been issued an updated PCI Attestation of Compliance (AoC) and Report on Compliance (RoC), re-certifying our compliance with the PCI Data Security Standard v4.0.1 as a Level 1 Service Provider. Where previously our scoping only included Managed deployments on AWS, PCI compliance is now possible with any PlanetScale Managed deployment, regardless of whether the data plane is deployed in your own AWS or GCP account. Be sure to review our updated Shared Responsibility Matrix to understand the controls you are required to maintain for your specific deployment. If you are interested in running PCI-scoped workloads on PlanetScale Managed, contact us for details. Existing enterprise customers can access the latest copies of our PCI reporting in our resources.
2025 SOC 1 Type 2 & SOC 2 Type 2 reports now availableJul 2025
PlanetScale's latest SOC 2 Type 2+ HIPAA report covering the period of June 16, 2024 to June 15, 2025 is now available to customers. We have also made our first SOC 1 Type 2 report available, covering the same period. Both reports are now available in our resources.
New vulnerability assessments now availableApr 2025
PlanetScale recently engaged a third-party firm to conduct a web application vulnerability assessment, network vulnerability assessment, and external network penetration testing. The resulting reports are now available in our resources.
A note about Sub-processor updatesMar 2025
From time to time, PlanetScale may make changes to the list of Sub-processors that it uses to assist in providing our services. When we do so, we will notify the billing contact for your organization. You may also choose to sign up for these updates to the email of your choosing by clicking the bell icon at the top of this page.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is PlanetScale Inc. SOC 2 compliant?
Is PlanetScale Inc. PCI DSS compliant?
Is PlanetScale Inc. HIPAA compliant?
Is PlanetScale Inc. GDPR compliant?
Is PlanetScale Inc. CCPA compliant?
Is PlanetScale Inc. SOC 2 Type I or Type II?
Can I use PlanetScale Inc.'s SOC 2 for a vendor risk assessment?
Is PlanetScale Inc. penetration tested?
Is PlanetScale Inc. secure?
Does PlanetScale Inc. have a bug bounty or vulnerability disclosure program?
Who are PlanetScale Inc.'s subprocessors?
Where does PlanetScale Inc. host or store data?
Where is PlanetScale Inc.'s trust center or security page?
I found a security bug. How can I report it?
How does PlanetScale encrypt data at rest?
How does PlanetScale encrypt data in transit?
Do you support Single Sign-On (SSO)?
Do you make an audit log available to customers?
Where can I find details about PlanetScale's availability and uptime?
Where does PlanetScale store my data?
Do you have a Data Processing Addendum (DPA)?
Do you sign Business Associate Agreements?
What deployment options does PlanetScale offer?
Can I deploy PlanetScale in my own cloud account?
Business & Industrial peers that completed SOC 2
Newsworthy.ai
1099-Prep
Octopus Deploy
