SOC2C

Storylane security & compliance

An overview of Storylane's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, GDPR
Penetration testNot listed
Subprocessors16 listed
HostingAWS
Trust centerView

Security questions about Storylane

Is Storylane secure?
Security isn't a single yes/no, but Storylane is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Storylane have a bug bounty or vulnerability disclosure program?
Storylane hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@storylane.io or via a /security page.
Who are Storylane's subprocessors?
Storylane lists 16 subprocessors on its trust center, including Amazon Web Services, Hubspot, Google Workspace, Intercom, Stripe. Buyers use this for fourth-party risk review.
Where does Storylane host or store data?
Storylane hosts on AWS, and handles Credit card information, Personal health information. Data residency details are on its trust center.
Does Storylane offer a Data Processing Agreement (DPA)?
Storylane publishes a DPA on its trust center. You can request access through SOC2C.
Where is Storylane's trust center or security page?
Storylane's trust center is at https://trust.storylane.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Storylane's full SOC 2 profile →