SOC2C

Regrow security & compliance

An overview of Regrow's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, ISO 27001, GDPR
Penetration testNot listed
Subprocessors7 listed
HostingGCP
Trust centerView

Security questions about Regrow

Is Regrow secure?
Security isn't a single yes/no, but Regrow is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Regrow have a bug bounty or vulnerability disclosure program?
Regrow hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@regrow.ag or via a /security page (Regrow lists a security contact).
Who are Regrow's subprocessors?
Regrow lists 7 subprocessors on its trust center, including Google Cloud Platform, Google Workspace, HubSpot, Mixpanel, Intercom. Buyers use this for fourth-party risk review.
Where does Regrow host or store data?
Regrow hosts on GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Regrow's trust center or security page?
Regrow's trust center is at https://trust.regrow.ag. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Regrow's full SOC 2 profile →