Titan Intake

Titan Intake hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Titan Intake's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Security isn't a single yes/no, but Titan Intake is SOC 2 Type II compliant and holds SOC 2 Type II, HIPAA, NIST CSF. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Titan Intake hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@titanintake.com or via a /security page (Titan Intake lists a security contact).

Titan Intake lists 5 subprocessors on its trust center, including Amazon Web Services, Google, GitHub, Metabase, Vanta. Buyers use this for fourth-party risk review.

Titan Intake hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Personal health information. Data residency details are on its trust center.

Titan Intake's trust center is at https://trust.titanintake.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Yes, Titan Intake encrypts data at rest to ensure the highest level of security for our clients' information. We utilize client-side encryption libraries supported by public cloud providers, and all archived data undergoes envelope encryption. This approach ensures that data remains secure and protected against unauthorized access even when stored.

Titan Intake has implemented strict privacy controls to ensure that all client data is handled with the utmost care. These controls include role-based access to data, regular privacy audits, and adherence to data minimization principles. We also maintain clear data processing agreements with all third parties and provide transparent communication to our clients about how their data is used and protected.

Yes, Titan Intake encrypts data in transit to ensure the highest level of security for our clients' information. We utilize advanced encryption protocols such as TLS 1.2 with a SHA512 hash to protect data as it moves between systems. This ensures that any data transmitted over networks is secure and inaccessible to unauthorized parties. By employing these robust encryption measures, Titan Intake maintains the confidentiality and integrity of sensitive information throughout its transmission, providing our clients with peace of mind that their data is always protected.

Yes, Titan Intake employs input encoding as part of its comprehensive security measures. Input encoding is a technique used to ensure that data entered into our systems is correctly processed and interpreted, preventing malicious inputs from causing harm or executing unintended commands. This practice is essential in mitigating risks such as injection attacks, where an attacker might try to introduce harmful code or data into our systems. By implementing input encoding, Titan Intake adds an additional layer of security that complements our existing encryption measures. While encryption at rest and in transit protects data from unauthorized access and interception, input encoding ensures that any data received by our systems is safe and handled appropriately. This combined approach significantly enhances our overall security posture, safeguarding client data from various potential threats and maintaining the integrity and reliability of our services.

Yes, Titan Intake is independently audited and maintains attestations for SOC 2 and HIPAA. Our SOC 2 compliance demonstrates our adherence to robust security practices, while our HIPAA compliance ensures we meet stringent requirements for protecting electronic protected health information (ePHI). These independent audits validate our commitment to maintaining the highest standards of security and privacy for our clients' data.

Yes, Titan Intake undergoes annual penetration testing to ensure the robustness of its security defenses. These regular, rigorous tests are conducted by independent third-party specialists who simulate real-world attacks to identify and address potential vulnerabilities in the systems. This proactive approach not only helps fortify the security posture but also ensures continuous compliance with industry standards and best practices. By subjecting its infrastructure and applications to these annual assessments, Titan Intake demonstrates an unwavering commitment to protecting clients' data against emerging threats and maintaining the highest levels of security integrity.