Is this your company? Buyers are checking Surglogs Inc here. Claim surglogs.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Surglogs Inc
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Surglogs Inc is SOC 2 Type II compliant. Surglogs Inc also holds HIPAA.
About
Surglogs, the ultimate regulatory and accreditation platform, empowers healthcare facilities to consistently uphold health and safety compliance standards. The platform automates the entire process of policy and procedure development, digital workflow creation, evidence collection, tracking, approvals, notifications, rounds, QAPI, and more. Surglogs’ digital platform is designed to assist healthcare facilities in continually enhancing the quality of care while simultaneously saving precious time for healthcare staff.
Compliance & infrastructure
Compliance leadership
The person who leads Surglogs Inc's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Surglogs Inc's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
4/11 details · 36%SOC2C shows the verified essentials. 7 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- SubprocessorsList your subprocessors so buyers can assess fourth-party risk, the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Surglogs Inc SOC 2 compliant?
Surglogs Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Surglogs Inc HIPAA compliant?
According to Surglogs Inc's public trust center, Surglogs Inc is HIPAA compliant. On SOC2C this listing is Listed.
Is Surglogs Inc SOC 2 Type I or Type II?
Surglogs Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Surglogs Inc's SOC 2 for a vendor risk assessment?
Yes. Surglogs Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Surglogs Inc penetration tested?
Surglogs Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Surglogs Inc secure?
Security isn't a single yes/no, but Surglogs Inc is SOC 2 Type II compliant and holds SOC 2 Type I, SOC 2 Type II, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Surglogs Inc have a bug bounty or vulnerability disclosure program?
Surglogs Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@surglogs.com or via a /security page (Surglogs Inc lists a security contact).
Who are Surglogs Inc's subprocessors?
Surglogs Inc's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Surglogs Inc host or store data?
Surglogs Inc's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Surglogs Inc's trust center or security page?
Surglogs Inc's trust center is at https://security.surglogs.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Is Surglogs SOC 2 Type II compliant?
Yes. Surglogs maintains SOC 2 Type II compliance and undergoes annual independent audits to assess the design and operating effectiveness of relevant security controls.
How does Surglogs support HIPAA requirements?
Surglogs maintains a HIPAA-aligned compliance program designed to protect electronic protected health information (ePHI). We apply administrative, technical, and physical safeguards, including encryption, access controls, workforce training, and vendor management processes.
Do you sign Business Associate Agreements (BAAs)?
Yes. Surglogs signs BAAs with all covered entities and business associates where required under HIPAA. If you need a BAA as part of your procurement process, contact us and we'll get it started.
Do you perform independent security assessments?
Yes. Surglogs undergoes regular independent security assessments, including annual audits and third-party penetration testing. Findings are tracked and remediated through our security processes.
Where is customer data hosted and how is the environment structured?
Customer data is hosted in the United States on Amazon Web Services (AWS) in a segmented cloud environment. Logical separation between customer environments is enforced at the infrastructure level to support security and availability.
How is customer data protected in transit and at rest?
All customer data is encrypted in transit using TLS and at rest using AES-256. Access is restricted by role, and our system architecture is designed to minimize exposure of sensitive data.
How are backups and disaster recovery handled?
Production data is backed up automatically, and Surglogs maintains disaster recovery and business continuity processes to support service resilience and recovery.
Where can I find information about uptime, outages, and service status?
Please visit https://status.surglogs.com/ to view current service status, subscribe to updates, and review past incidents and maintenance events.
How is access to customer data restricted and controlled?
Access to customer data is restricted based on role and business need, following the principle of least privilege. Additional controls, such as centralized identity management and multi-factor authentication for administrative access, are used where applicable.
Do you have a formal vulnerability management and monitoring process?
Yes. Our vulnerability management program includes continuous scanning, risk-based prioritization, and tracked remediation. We maintain logging and monitoring across our environment to detect and respond to security events in a timely manner.
Are your security policies and procedures reviewed regularly?
Yes. Security policies and procedures are reviewed at minimum annually and updated following any significant changes to our environment, systems, or threat landscape.
Do you perform security reviews of third-party vendors and subprocessors?
Yes. Surglogs performs risk-based due diligence on relevant third-party vendors and subprocessors before onboarding and reviews them periodically.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public