SOC2C

Swan security & compliance

An overview of Swan's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 · Listed
FrameworksNot listed
Penetration testNot listed
Subprocessors12 listed
HostingAWS
Trust centerView

Security questions about Swan

Is Swan secure?
Security isn't a single yes/no, but Swan is SOC 2 compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Swan have a bug bounty or vulnerability disclosure program?
Swan hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@swan.io or via a /security page (Swan lists a security contact).
Who are Swan's subprocessors?
Swan lists 12 subprocessors on its trust center, including Amazon Web Services, Idemia, Wise, Monext 3DS, Checkout (Ubble). Buyers use this for fourth-party risk review.
Where does Swan host or store data?
Swan hosts on AWS. Data residency details are on its trust center.
Where is Swan's trust center or security page?
Swan's trust center is at https://trust.swan.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Swan's full SOC 2 profile →