Is this your company? Buyers are checking Ruddr here. Claim ruddr.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Ruddr
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Ruddr is SOC 2 compliant. Ruddr also holds ISO 27001, and GDPR.
About
Ruddr provides a cloud-based Professional Services Automation platform to companies across the globe.
Compliance & infrastructure
Hosting
AWS
Data handled
Customer personally identifiable informationCredit card informationPersonal health information
Documents
8Documents
- Ruddr ISO 27001:2022 CertificateRequest
- Ruddr Article 27 UK Certificate of RepresentationPublic
- Ruddr Article 27 EU Certificate of RepresentationPublic
- Ruddr Annual Penetration Test LOARequest
- Ruddr W-9Public
- Ruddr General Liability Certificate of InsuranceRequest
- Ruddr Technology Errors & Ommissions Certificate of InsuranceRequest
- Ruddr Workers' Compensation Certificate of InsuranceRequest
Subprocessors
22- AAmazon Web Services · aws
- GGitHub · github
- SStripe · Payment Processing
- GGoogle Workspace · gsuiteadmin
- AAnthropic · AI
- AAtlassian
- BBackblaze · Backups
- CCheckr · Background Verification
- CCookieYes · Cookie Management
- HHubSpot · Marketing Automation
- MMicrosoft · Session Replay
- MMintlify · Customer support
Show all 22 subprocessorsShow fewer
- nngrok · Engineering
- NNotion · Collaboration
- OOpen Exchange Rates · Currency Exchange
- OOpenAI · AI
- RRippling · Human Resources Information System
- SSlack · Collaboration
- SSentry · Cloud Monitoring
- VVanta
- ZZenDesk · Customer Support
- ZZoom · Web Conferencing
Compliance leadership
The person who leads Ruddr's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Ruddr's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Ruddr SOC 2 compliant?
Ruddr is SOC 2 compliant. On SOC2C this listing is Listed.
Is Ruddr ISO 27001 certified?
According to Ruddr's public trust center, Ruddr is ISO 27001 certified. On SOC2C this listing is Listed.
Is Ruddr GDPR compliant?
According to Ruddr's public trust center, Ruddr is GDPR compliant. On SOC2C this listing is Listed.
Can I use Ruddr's SOC 2 for a vendor risk assessment?
Yes. Ruddr's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Ruddr penetration tested?
Ruddr hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Does Ruddr have an ISO 27001 certificate?
Ruddr publishes an ISO certificate on its trust center; you can request access through SOC2C.
Is Ruddr secure?
Security isn't a single yes/no, but Ruddr is SOC 2 compliant and holds ISO 27001, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Ruddr have a bug bounty or vulnerability disclosure program?
Ruddr hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@ruddr.com or via a /security page (Ruddr lists a security contact).
Who are Ruddr's subprocessors?
Ruddr lists 22 subprocessors on its trust center, including Amazon Web Services, GitHub, Stripe, Google Workspace, Anthropic. Buyers use this for fourth-party risk review.
Where does Ruddr host or store data?
Ruddr hosts on AWS, and handles Customer personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Ruddr's trust center or security page?
Ruddr's trust center is at https://trust.ruddr.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Who is Ruddr's data privacy local representative in the United Kingdom and European Union?
We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative in the UK and EU. To make use of your data subject rights or to view our EU or UK Article 27 certificate of representation, see Ruddr's compliance page.
Is Ruddr certified with the Data Privacy Framework?
Yes, Ruddr adheres to the Data Privacy Framework Principles regarding the collection, use, and retention of personal information transferred from the European Union and European Economic Area member states, United Kingdom, and Switzerland to the United States. Additional information, along with our certification, can be found at https://www.dataprivacyframework.gov.
Where can I find Ruddr's Data Processing Addendum?
Ruddr's Data Processing Agreement (DPA) can be found here.
Where can I find information about Ruddr's uptime and downtime?
We recommend checking out our status page. From that page you can subscribe for updates and view historical uptime/outages.
Where are Ruddr's servers located?
Ruddr's servers are located in the Amazon Web Services (AWS) US region. Static files may be cached at edge locations around the world using the AWS CloudFront CDN.
How does Ruddr encrypt data in-transit?
Ruddr uses TLS 1.2 or higher everywhere data is transmitted over potentially insecure networks. We also use features such as HSTS (HTTP Strict Transport Security) to maximize the security of our data in transit. Server TLS keys and certificates are managed by AWS and deployed via Application Load Balancers.
Does Ruddr encrypt data at rest?
All datastores with customer data, in addition to S3 buckets, are encrypted at rest. Sensitive collections and tables also use row-level encryption.
How does Ruddr back up data and how long are backups retained?
We back up our production database using AWS RDS automated backups, which support point-in-time recovery within our configured retention window, and we retain these backups for 30 days. In addition, we generate nightly backup files that are stored in Amazon S3 and then synced to Backblaze B2 for offsite resiliency; lifecycle/retention controls are applied in both S3 and B2 to automatically enforce our backup retention policy.
Does Ruddr conduct penetration tests?
Yes. Ruddr engages with one of the best penetration testing consulting firms in the industry on an annual basis. You can request our latest penetration test results from the Resources page of this trust site.
How is my payment being processed?
We use Stripe to process your payment. It's the same payment provider used by many of the world's leading brands. We do not handle your credit card information directly.
Legal & Government peers that completed SOC 2
Anthropic PBC
anthropic.com · United Kingdom · Legal & Government
SOC 2 Type IIRenewal not public
whiz.ai
whiz.ai · United States · Legal & Government
Renewal not public
DirectMailers
directmailers.com · United States · Legal & Government
SOC 2 Type IIRenewal not public
Careerflow
careerflow.ai · United States · Legal & Government
SOC 2 Type IIRenewal not public