SOC2C

Is this your company? Buyers are checking ShipBob Inc here. Claim shipbob.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free
ShipBob Inc logo

ShipBob Inc

shipbob.com· United States· 51–200 employees· Security contact
Security overviewCompliancePenetration test
Trust level
Listed
Unverified

Sourced from public information. Not yet verified by the company.

ShipBob Inc is SOC 2 Type II compliant. ShipBob Inc also holds ISO 27001.

Request report accessClaim this profile
Framework
SOC 2 Type II
Auditor
Not publicAdd
Last report
—Add
Renewal
UnknownAdd
View official trust center ↗

About

The security and protection of our customers' data is one of our top priorities at ShipBob. We have implemented a comprehensive set of policies, procedures, and technologies designed to safeguard sensitive information from unauthorized access, breaches, and other security threats. Our robust data protection measures encompass access control, data encryption, employee and contractor policies, system security, incident management, business continuity, risk management, vendor oversight, customer data management, and governance. Additionally, we have completed SOC 2 and ISO 27001 audits, which val

Compliance & infrastructure

SOC 2 Type IIISO 27001
Hosting
Azure
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information

Documents

3
Documents

Subprocessors

50
  • M
    Microsoft Azure · Application Services, Infrastructure, and Storage
    US
  • O
    Office 365 · office
  • J
    Jira · jira
    US
  • S
    SalesForce · CRM/Customer Support
    US
  • 6
    6sense · Sales intelligence platform
  • A
    ACI · Carrier
    US
  • A
    Adobe Marketo Engage · Marketing Attribution Software
  • A
    AfterShip · Carrier
    US
  • A
    Amazon · Carrier
  • A
    Amazon Shipping UK · Carrier
    UK
  • A
    APG · Carrier
  • A
    Australia Post · Carrier
    AU
Show all 50 subprocessors
  • A
    Azure DevOps · azuredevops
    US
  • B
    Better Trucks · Carrier
    US
  • B
    Blue Yonder, Inc. (Previously Optoro) · Warehouse returns processing
  • C
    Canada Post · Carrier
    CA
  • C
    Check Point (Avanan) · Email Security
    US
  • C
    Chorus · Webcasting and Conference Calling
    US
  • C
    C.H. Robinson · Transportation Management System
  • C
    CIRRO · Carrier
    US
  • C
    Clay · Sales data enrichment
  • C
    Cloudflare · Web Application Firewall
    US
  • C
    Couriers Please · Carrier
    AU
  • C
    Cvent · Marketing/events platform
  • D
    DAI Post · Carrier
    AU
  • D
    Decagon AI, Inc. · Customer support AI chatbot
    US
  • D
    Deutsche Post · Carrier
  • D
    DHL eCommerce · Carrier
    US
  • D
    DPD Group UK · Carrier
    UK
  • D
    Docusign, Inc. · Contract Administration and Signature Tool
    US
  • D
    DocuSmart, Inc. d/b/a Lexion · Contract Management Platform
    US
  • D
    DropBox Sign · Contract Administration and Signature Tool
    US
  • E
    EasyPost · Address Validation and Carrier Label Purchasing
    US
  • E
    Evri · Carrier
    UK, NL
  • F
    FedEx · Carrier
  • F
    FlavorCloud · Cross border commerce services
    US
  • G
    G3 Worldwide Mail (UK) Ltd DBA Spring Global Delivery Solutions · Carrier
  • G
    Global-E · Carrier
    UK-EU
  • G
    GLS · Carrier
  • G
    Gong.io Inc · Sales and outreach
  • H
    HubSpot · Marketing
    US
  • I
    Intercom · Chat Based Support System
    US
  • I
    International Bridge · Carrier
    US
  • M
    Mailgun · Transactional Email
    US
  • M
    Mongo DB, Inc · Database
    US
  • O
    Ontrac · Carrier
    US
  • O
    Open Border · Carrier
    US
  • O
    Orderful Inc. · Supply Chain Management
    US
  • O
    OSM Worldwide · Carrier
    US
  • P
    Pandium Inc. · Integration developer

Compliance leadership

The person who leads ShipBob Inc's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. ShipBob Inc's penetration test vendor isn't listed yet.

Claim this profile to add it.

Recent updates

Updated 2025 Compliance Reports Now AvailableAug 2025

We are pleased to announce the availability of ShipBob's updated 2025 SOC 2 Type 2 report and ISO 27001:2022 certificate. These reports demonstrate our continued commitment to the highest standards of data security and to maintaining the trust and confidence of our customers. To access these compliance reports please visit the ShipBob Trust Center.

This listing is partial

7/11 details · 64%

SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

  • Auditorraises trust
    Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
  • Report dateraises trust
    Add your most recent report period so buyers see how current your SOC 2 is.
  • Renewal date
    Add your renewal window so buyers know your coverage is active.
  • Security controls
    Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is ShipBob Inc SOC 2 compliant?
ShipBob Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is ShipBob Inc ISO 27001 certified?
According to ShipBob Inc's public trust center, ShipBob Inc is ISO 27001 certified. On SOC2C this listing is Listed.
Is ShipBob Inc SOC 2 Type I or Type II?
ShipBob Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use ShipBob Inc's SOC 2 for a vendor risk assessment?
Yes. ShipBob Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is ShipBob Inc penetration tested?
ShipBob Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Business & Industrial peers that completed SOC 2

Compare vs Newsworthy.aiCompare vs Octopus DeployCompare vs 1099-Prep
Newsworthy.ai logo

Newsworthy.ai

newsworthy.ai · United States · Business & Industrial
Listed
SOC 2 Type IIRenewal not public
Octopus Deploy logo

Octopus Deploy

octopus.com · United Kingdom · Business & Industrial
Listed
SOC 2 Type IIRenewal not public
1099-Prep logo

1099-Prep

1099-prep.com · United States · Business & Industrial
Listed
SOC 2 Type IRenewal not public
Ask Ai logo

Ask Ai

ask-ai.com · Business & Industrial
Listed
SOC 2 Type IIRenewal not public