Is this your company? Buyers are checking Terminal3 here. Claim terminal3.io free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Terminal3
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Terminal3 is SOC 2 Type II compliant. Terminal3 also holds ISO 27001.
About
Terminal 3 is Web3’s most powerful user identity and data oracle, leveraging decentralized data storage and zero-knowledge cryptography to power privacy-preserving credentials and applications
Compliance & infrastructure
Hosting
GCP
Data handled
Customer personally identifiable information
Subprocessors
9- GGoogle Cloud Platform · Cloud provider
- MMongoDB Atlas · Data storage and processing
- VVercel · Engineering
- PPinata · Data storage and processing
- OOndato · Identity provider
- VVeriff · Identity provider
- SSentry · Cloud monitoring
- LLinear · Collaboration
- IInfura · Data storage and processing
Compliance leadership
The person who leads Terminal3's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Terminal3's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Terminal3 SOC 2 compliant?
Terminal3 is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Terminal3 ISO 27001 certified?
According to Terminal3's public trust center, Terminal3 is ISO 27001 certified. On SOC2C this listing is Listed.
Is Terminal3 SOC 2 Type I or Type II?
Terminal3 is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Terminal3's SOC 2 for a vendor risk assessment?
Yes. Terminal3's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Terminal3 penetration tested?
Terminal3 hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Terminal3 secure?
Security isn't a single yes/no, but Terminal3 is SOC 2 Type II compliant and holds SOC 2 Type II, SOC 2 Type I, ISO 27001. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Terminal3 have a bug bounty or vulnerability disclosure program?
Terminal3 hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@terminal3.io or via a /security page (Terminal3 lists a security contact).
Who are Terminal3's subprocessors?
Terminal3 lists 9 subprocessors on its trust center, including Google Cloud Platform, MongoDB Atlas, Vercel, Pinata, Ondato. Buyers use this for fourth-party risk review.
Where does Terminal3 host or store data?
Terminal3 hosts on GCP, and handles Customer personally identifiable information. Data residency details are on its trust center.
Where is Terminal3's trust center or security page?
Terminal3's trust center is at https://trust.terminal3.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
How is my data secure when being queried by companies?
When we need to retrieve or “query” the data, we again use a secure HTTPS connection. Queries are done on encrypted data using structured encryption (STE). In addition, we provide zero-knowledge (ZK) proofs that data has not been tampered with.
Do you encrypt data at rest?
We securely store user data encrypted (”at rest”). Because our storage system is based on IPFS, the encrypted data is stored in atomised blocks, and referenced by a digital fingerprint (”CID”), making the data tamper-proof and immutable.
How does Terminal 3 encrypt data in-transit?
When a user sends information to our system, we make sure it is secure. First, the user’s key encrypts their data client-side. Then, encrypted data is transferred over a secure HTTPS connection, preventing the data from being stolen or modified.
Where can I find information about Terminal 3's uptime and downtimes?
Find our status page at status.terminal3.io.
What is Terminal 3's encryption scheme?
We use symmetric key encryption (AES-GCM). Keys are encrypted to the Lit Network’s BLS public key. The BLS private key shares are used by the nodes to decrypt.
Want to report a potential security issue?
For any security issues, you can choose to report them anonymously to our Anonymous Whistleblower Form or email privacy@terminal3.io.
Do you support Single Sign-On (SSO)?
_Sign In with Terminal 3_ is a convenient way for enterprises to create accounts secured by Terminal 3 while authenticating with their own proprietary application. Currently available for web, it is based on the OpenID Connect protocol (Authorization Code Flow) to allow your system to verify the identity of users and to securely access publicly-available user profile data.
Where are your servers located?
Terminal 3 stores all personally identifiable information (PII) on the InterPlanetary File System (IPFS), a decentralized, peer-to-peer file storage and sharing protocol. It enables users to store and access data in a distributed network, eliminating the reliance on centralised servers. IPFS operates on a distributed network of nodes where each participant can store and serve files. Learn more about how IPFS keeps your files safe.