Sauce Labs security & compliance
An overview of Sauce Labs's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, ISO 27001, ISO 27701, GDPR, CCPA, CSA STAR
Penetration testNot listed
Subprocessors12 listed
HostingAWS, GCP
Trust centerView
Security questions about Sauce Labs
- Is Sauce Labs secure?
- Security isn't a single yes/no, but Sauce Labs is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 27701, GDPR, CCPA, CSA STAR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does Sauce Labs have a bug bounty or vulnerability disclosure program?
- Sauce Labs hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@saucelabs.com or via a /security page (Sauce Labs lists a security contact).
- Who are Sauce Labs's subprocessors?
- Sauce Labs lists 12 subprocessors on its trust center, including Amazon Web Services, Inc., Google Cloud Platform, Salesforce, Akamai (Linode LLC), Mailchimp (The Rocket Science Group, LLC ). Buyers use this for fourth-party risk review.
- Where does Sauce Labs host or store data?
- Sauce Labs hosts on AWS, GCP, and handles Customer personally identifiable information, Credit card information, Personal health information, Employee Business Card information (name, email, phone number). Data residency details are on its trust center.
- Where is Sauce Labs's trust center or security page?
- Sauce Labs's trust center is at https://trust.saucelabs.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.