Prophix

According to Prophix's public trust center, Prophix is HITRUST certified. On SOC2C this listing is Listed.

According to Prophix's public trust center, Prophix is CSA STAR certified. On SOC2C this listing is Listed.

Prophix is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Yes. Prophix's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Prophix hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Security isn't a single yes/no, but Prophix is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, GDPR, HITRUST, CSA STAR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Prophix hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@prophix.com or via a /security page.

Prophix lists 16 subprocessors on its trust center, including Amazon Web Services, Datadog, ChurnZero, Zendesk, Microsoft. Buyers use this for fourth-party risk review.

Prophix hosts on AWS, and handles Credit card information, Personal health information, Organization and account information (e.g., name, contact details, company), Customer uploaded data (financial, budgeting, planning). Data residency details are on its trust center.

Prophix's trust center is at https://trust.prophix.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Upcoming scheduled maintenances events and releases can be found at https://status.prophix.cloud/ This will give you the ability to subscribe for updates to be notified of any outages, and view historical events.

Yes, single sign-on (SSO) is supported to leading identity providers such as Microsoft Entra (formerly AzureAD), Okta, and SAML2 compatible services.

Yes, Prophix support role-based access controls to grant and restrict individual user access to product capabilities and data based on roles and groups.

Applications in the Prophix Financial Performance Platform are native web application based on an modern web technologies such as ASP.NET using RESTful APIs and SQL databases with a browser-based user interface. 

To govern the development of new AI capabilities at Prophix, we have established core Responsible AI Principles. These principles reference our commitment to Transparency, Trust, Customer Control, and Fairness & Equity. ##### Transparency Prophix is dedicated to AI transparency, informing our customers about the AI-enabled features in our platform. We strive to keep our customers aware of AI capabilities, their benefits and limitations. ##### Trust Prophix places paramount importance to the security and data privacy of customer data, adhering to industry leading global standards, policies, and regularly monitors potential threats to protect your data. We use data only as outlined in your Cloud Services Agreement. ##### Customer control Prophix is committed to allowing customers to control their own usage of AI capabilities by permitting enabling or disabling AI features. We also actively seek feedback from our customers to develop mutually beneficial solutions to meet their requirements. ##### Fairness & equity Prophix strives to promote a fair and equitable experience for users and works actively to identify and mitigate potential biases. We are committed to testing our AI services and employing content guardrails to prevent harmful conduct. ##### Compliance Prophix has completed the TrustArc Responsible AI Certification. The TRUSTe Responsible AI Certification is the first AI certification focused explicitly on data protection and privacy. Incorporating principles of the EU AI Act, NIST AI Risk Management Framework, ISO:42001, and OECD AI Principles offers a clear framework for companies aiming to comply with core principles of responsible AI. 

Yes, Prophix has a policy covering the permissible usage of Generative AI

Prophix One Intelligence combines predictive forecasting, advanced analytics, and anomaly detection with purpose-built AI Agents to help finance teams anticipate outcomes, identify risks, and focus on what matters most. Today, it enhances productivity through work augmentation while establishing the foundation for fully autonomous financial operations tomorrow.

Prophix One Intelligence is using Anthropic Claude Sonnet LLM within Amazon Bedrock. Amazon Bedrock, managed within the Prophix Cloud Services AWS account, offers top foundation models from AI leaders like Anthropic. The LLM providers we use do not retain your inputs and outputs or use them to improve their services. 

The data you submit and the responses you get from Prophix One Intelligence are not used to improve any LLM models or services.

No, your submitted data and received responses serve only your experience. They are not used to train models or shared with other customers.

Prophix One Intelligence features adhere to existing security practices. Prophix Cloud Services has achieved ISAE 3402, Type II, SOC 2, Type II and ISO/IEC 27001:2022 certifications.

Yes, AI capabilities in Prophix like Knowledge Assistant or Data Insights can be disabled globally from the Prophix One Portal.