SOC2C

Scribehow security & compliance

An overview of Scribehow's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, CCPA, GDPR
Penetration testNot listed
Subprocessors14 listed
HostingAWS
Trust centerView

Security questions about Scribehow

Is Scribehow secure?
Security isn't a single yes/no, but Scribehow is SOC 2 Type II compliant and holds SOC 2 Type II, CCPA, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Scribehow have a bug bounty or vulnerability disclosure program?
Scribehow hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@scribehow.com or via a /security page (Scribehow lists a security contact).
Who are Scribehow's subprocessors?
Scribehow lists 14 subprocessors on its trust center, including Amazon Web Services, Inc., AssemblyAI, Cloudflare, Inc., Anthropic, Honeycomb. Buyers use this for fourth-party risk review.
Where does Scribehow host or store data?
Scribehow hosts on AWS. Data residency details are on its trust center.
Where is Scribehow's trust center or security page?
Scribehow's trust center is at https://trust.scribehow.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Scribehow's full SOC 2 profile →