Question 1

Is Runbear Inc SOC 2 compliant?

Accepted Answer

Runbear Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Runbear Inc SOC 2 Type I or Type II?

Accepted Answer

Runbear Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 3

Can I use Runbear Inc's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Runbear Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 4

Is Runbear Inc penetration tested?

Accepted Answer

Yes — Runbear Inc undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.

Question 5

Does Runbear Inc have a penetration test report?

Accepted Answer

Runbear Inc publishes a penetration test summary on its trust center. You can request access to it through SOC2C.

Question 6

Can I get Runbear Inc's SOC 2 report?

Accepted Answer

Runbear Inc's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 7

Is Runbear Inc secure?

Accepted Answer

Security isn't a single yes/no, but Runbear Inc is SOC 2 Type II compliant, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does Runbear Inc have a bug bounty or vulnerability disclosure program?

Accepted Answer

Runbear Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@runbear.io or via a /security page (Runbear Inc lists a security contact).

Question 9

Who are Runbear Inc's subprocessors?

Accepted Answer

Runbear Inc lists 11 subprocessors on its trust center, including Google Cloud Platform, Vercel, Supabase, Cloudflare, Sentry. Buyers use this for fourth-party risk review.

Question 10

Where does Runbear Inc host or store data?

Accepted Answer

Runbear Inc hosts on GCP. Data residency details are on its trust center.

Question 11

Where is Runbear Inc's trust center or security page?

Accepted Answer

Runbear Inc's trust center is at https://trust.runbear.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

Does Runbear access my sensitive information?

Accepted Answer

No, Runbear only accesses messages necessary for running LLM applications. For instance, it reads messages in a thread where users ask for a response by mentioning @Runbear. It does not access any other messages.

Question 13

Does Runbear store my messages?

Accepted Answer

Runbear temporarily caches the minimum amount of message content needed to operate the service, such as delivering responses and improving the user experience. This cached data is kept in a secure, fully encrypted infrastructure and is automatically purged after a short retention period. We also store non-content message IDs to link identical messages across platforms (such as Slack and OpenAI) and prevent duplication. All data is encrypted at rest and in transit, and our systems are SOC 2 Type II compliant.

Question 14

Does Runbear use my data elsewhere?

Accepted Answer

No. Runbear uses your data only to operate the service — processing messages through LLM providers and returning responses to your communication channels. We do not use your data for model training, and we never sell or share it with third parties.

Runbear Inc

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Technology peers that completed SOC 2

Action1

ELJUN LLC

equipifi

IntelligentSystems Corp