PlayPlay security & compliance
An overview of PlayPlay's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 · Listed
FrameworksISO 27001, GDPR, CCPA
Penetration testNot listed
Subprocessors11 listed
HostingGCP, Azure
Trust centerView
Security questions about PlayPlay
- Is PlayPlay secure?
- Security isn't a single yes/no, but PlayPlay is SOC 2 compliant and holds ISO 27001, GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does PlayPlay have a bug bounty or vulnerability disclosure program?
- PlayPlay hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@playplay.com or via a /security page (PlayPlay lists a security contact).
- Who are PlayPlay's subprocessors?
- PlayPlay lists 11 subprocessors on its trust center, including Assembly AI, Eleven Labs Inc., Google Cloud Platform, HeyGen, Langfuse. Buyers use this for fourth-party risk review.
- Where does PlayPlay host or store data?
- PlayPlay hosts on GCP, Azure, and handles Customer personally identifiable information, Credit card information, Personal health information, Customer uploaded medias and videos created. Data residency details are on its trust center.
- Does PlayPlay offer a Data Processing Agreement (DPA)?
- PlayPlay publishes a DPA on its trust center. You can request access through SOC2C.
- Where is PlayPlay's trust center or security page?
- PlayPlay's trust center is at https://security.playplay.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.