Is this your company? Buyers are checking Regrow here. Claim regrow.ag free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Regrow
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Regrow is SOC 2 Type II compliant. Regrow also holds ISO 27001, and GDPR.
About
Regrow’s mission is to make agriculture resilient globally, and our values of commitment to our customers, clarity, and ownership drive how we think about and develop our platforms to be secure and implement data policies that protect our customers’ data. As an agriculture tech provider, Regrow recognizes the importance of the agricultural data used in our software, and our team is deeply committed to its safety.
Compliance & infrastructure
Hosting
GCP
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health informationFarm management and farm history data
Documents
5Subprocessors
7- GGoogle Cloud Platform · Cloud Service Provider1600 Ampitheatre Pkwy, Mountain View, CA 94043 USA
- GGoogle Workspace · Identity Provider1600 Ampitheatre Pkwy, Mountain View, CA 94043 USA
- HHubSpot · Marketing and Customer SupportPO Box 419842 Boston, MA 02241-9842 USA
- MMixpanel · Data Analytics1 Front St, Suite 2800, San Francisco, CA 94111 USA
- IIntercom · Customer Support18-21 St. Stephen’s Green Dublin 2, Ireland
- GGoogle Drive · Document Management1600 Ampitheatre Pkwy, Mountain View, CA 94043 USA
- JJira · Project management, product support and collaborationAtlassian Pty Ltd, Level 6, 341 George St, Sydney NSW 2000, Australia
Compliance leadership
The person who leads Regrow's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Regrow's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Regrow SOC 2 compliant?
Regrow is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Regrow ISO 27001 certified?
According to Regrow's public trust center, Regrow is ISO 27001 certified. On SOC2C this listing is Listed.
Is Regrow GDPR compliant?
According to Regrow's public trust center, Regrow is GDPR compliant. On SOC2C this listing is Listed.
Is Regrow SOC 2 Type I or Type II?
Regrow is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Regrow's SOC 2 for a vendor risk assessment?
Yes. Regrow's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Regrow penetration tested?
Regrow hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Regrow secure?
Security isn't a single yes/no, but Regrow is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Regrow have a bug bounty or vulnerability disclosure program?
Regrow hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@regrow.ag or via a /security page (Regrow lists a security contact).
Who are Regrow's subprocessors?
Regrow lists 7 subprocessors on its trust center, including Google Cloud Platform, Google Workspace, HubSpot, Mixpanel, Intercom. Buyers use this for fourth-party risk review.
Where does Regrow host or store data?
Regrow hosts on GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Regrow's trust center or security page?
Regrow's trust center is at https://trust.regrow.ag. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
What data does Regrow collect?
Regrow will only collect the data required for each program. As our customers’ programs may differ, the data collected may differ slightly. However, in general, we collect the following information for each MRV participant: - Farm management data (crop type, tillage type, fertilizer, cover crop type) - Farm management events (seeding dates, harvest dates, fertilizer application dates, tillage dates) - Field location/boundaries - Farmer name/email - Phone number For Sustainability Insights customers, we will collect the following: - End user name and email - Area of interest Please see our privacy policy for more information on the data that we collect.
Does Regrow sell or give customer data (including farmer data) to third-parties?
No, Regrow does not and will never sell customer data. Regrow will only provide customer data to third parties with express written consent from the customer and only as requested and initiated by the customer. We understand that as part of customers’ MRV programs, they may partner with verifiers, partners and others to create a successful program, and we will only provide customer data to those partners when we have received permission to do so.
Does Regrow use customer data (including farmer data) to create new products that it sells?
No, Regrow does not use customer data to create new products. We may use customer data to train, validate and calibrate the data models that we use to refine the quality of the outcomes where we have received permission to do so from the customer within the contract. When we do this, we only use non-identifiable data, and our preference is to also use aggregated data.
Who owns the data that is entered into Regrow’s platform?
Ownership of the data stays with the account user.
How is farm data protected?
Regrow considers farm data to be confidential and, sometimes, sensitive data. This means that we use industry standard best practices to encrypt the data.
Where is farmer data stored?
The data is stored in cloud services in the U.S. and Australia.
What is Regrow’s philosophy when it comes to using and protecting farmers’ data?
Regrow’s work is ultimately aimed at supporting the success and longevity of farmers’ businesses. To that end, we believe it is important to collect only the minimum amount of data needed to provide the best service to our customers and farmers, and we actively seek ways to make this even easier for farmers. We understand this data is core to each farmer’s business, which is why it was important to us to implement and maintain industry standard security certifications. Our ISO 27001 and SOC2 Type II certificates mean that our systems and controls are audited each year both internally and externally to help ensure that farmer data is kept secure.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public