TheyDo BV security & compliance
An overview of TheyDo BV's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksISO 27001, SOC 2 Type II, GDPR
Penetration testNot listed
Subprocessors12 listed
HostingAWS, GCP, Azure
Trust centerView
Security questions about TheyDo BV
- Is TheyDo BV secure?
- Security isn't a single yes/no, but TheyDo BV is SOC 2 Type II compliant and holds ISO 27001, SOC 2 Type II, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does TheyDo BV have a bug bounty or vulnerability disclosure program?
- TheyDo BV hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@theydo.com or via a /security page (TheyDo BV lists a security contact).
- Who are TheyDo BV's subprocessors?
- TheyDo BV lists 12 subprocessors on its trust center, including Amazon Web Services, Flagsmith, Mailgun, Segment, Sentry. Buyers use this for fourth-party risk review.
- Where does TheyDo BV host or store data?
- TheyDo BV hosts on AWS, GCP, Azure, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
- Where is TheyDo BV's trust center or security page?
- TheyDo BV's trust center is at https://trust.theydo.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.