Prophix security & compliance
An overview of Prophix's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, GDPR, HITRUST, CSA STAR
Penetration testNot listed
Subprocessors16 listed
HostingAWS
Trust centerView
Security questions about Prophix
- Is Prophix secure?
- Security isn't a single yes/no, but Prophix is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, GDPR, HITRUST, CSA STAR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does Prophix have a bug bounty or vulnerability disclosure program?
- Prophix hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@prophix.com or via a /security page.
- Who are Prophix's subprocessors?
- Prophix lists 16 subprocessors on its trust center, including Amazon Web Services, Datadog, ChurnZero, Zendesk, Microsoft. Buyers use this for fourth-party risk review.
- Where does Prophix host or store data?
- Prophix hosts on AWS, and handles Credit card information, Personal health information, Organization and account information (e.g., name, contact details, company), Customer uploaded data (financial, budgeting, planning). Data residency details are on its trust center.
- Where is Prophix's trust center or security page?
- Prophix's trust center is at https://trust.prophix.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.