Question 1

Is FindGuru Inc SOC 2 compliant?

Accepted Answer

FindGuru Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is FindGuru Inc GDPR compliant?

Accepted Answer

According to FindGuru Inc's public trust center, FindGuru Inc is GDPR compliant. On SOC2C this listing is Listed.

Question 3

Is FindGuru Inc PCI DSS compliant?

Accepted Answer

According to FindGuru Inc's public trust center, FindGuru Inc is PCI DSS compliant. On SOC2C this listing is Listed.

Question 4

Is FindGuru Inc SOC 2 Type I or Type II?

Accepted Answer

FindGuru Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 5

Can I use FindGuru Inc's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. FindGuru Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 6

Is FindGuru Inc penetration tested?

Accepted Answer

FindGuru Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 7

Is FindGuru Inc secure?

Accepted Answer

Security isn't a single yes/no, but FindGuru Inc is SOC 2 Type II compliant and holds GDPR, SOC 2 Type II, PCI DSS. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does FindGuru Inc have a bug bounty or vulnerability disclosure program?

Accepted Answer

FindGuru Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@preply.com or via a /security page (FindGuru Inc lists a security contact).

Question 9

Who are FindGuru Inc's subprocessors?

Accepted Answer

FindGuru Inc lists 11 subprocessors on its trust center, including Amazon Web Services, Google Workspace, Consultants (FUNDAE)*, Hallo, Inc., Preply Europe Services SL. Buyers use this for fourth-party risk review.

Question 10

Where does FindGuru Inc host or store data?

Accepted Answer

FindGuru Inc hosts on AWS, and handles Credit card information, Other sensitive data, Customer personal data, Employee personal data. Data residency details are on its trust center.

Question 11

Where is FindGuru Inc's trust center or security page?

Accepted Answer

FindGuru Inc's trust center is at https://trust.preply.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

Is there a dedicated security team monitoring the platform?

Accepted Answer

Yes, at Preply, we employ a skilled team dedicated exclusively to the security of our platform and applications. This team is responsible for code reviews, rigorous testing, and the adoption of secure development practices. They actively manage our security stance, evaluate risks, and ensure adherence to both regulations and standards to safeguard user data. Continuous monitoring of security events, incident response, and the maintenance of robust security controls are all part of their daily duties.

Question 13

Where are your servers located?

Accepted Answer

Our servers are primarily hosted on AWS cloud in the EU (regions: eu-west-1 and eu-central-1). We also utilize resources in US regions, which are used exclusively for operational purposes and do not store any user data.

Question 14

How do you identify new risks and vulnerabilities

Accepted Answer

To stay ahead of new threats, we employ several strategies. Our private bug bounty program on HackerOne engages security researchers to report new vulnerabilities. We also conduct annual penetration testing to uncover any potential security weaknesses. Furthermore, our Risk Management framework supports ongoing risk assessments and facilitates remediation discussions across our teams.

FindGuru Inc

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Education peers that completed SOC 2

Mentor Collective

Go1

Apperson Inc

Mgkusumaputra