Is TrackVia Inc. secure?

Security isn't a single yes/no, but TrackVia Inc. is SOC 2 Type II compliant and holds SOC 2 Type II, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Does TrackVia Inc. have a bug bounty or vulnerability disclosure program?

TrackVia Inc. hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@trackvia.com or via a /security page (TrackVia Inc. lists a security contact).

Who are TrackVia Inc.'s subprocessors?

TrackVia Inc. lists 4 subprocessors on its trust center, including Amazon Web Services, Formstack, SendGrid (Twilio), Workato. Buyers use this for fourth-party risk review.

Where does TrackVia Inc. host or store data?

TrackVia Inc. hosts on AWS. Data residency details are on its trust center.

Where is TrackVia Inc.'s trust center or security page?

TrackVia Inc.'s trust center is at https://trust.trackvia.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Is this your company? Buyers are checking TrackVia Inc. here. Claim trackvia.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free

TrackVia Inc.

trackvia.com · United States· 1–50 employees· Security contact

Security overview Compliance Penetration test

Trust level

Listed

Unverified

Listed

Domain

Report

Live

Sourced from public information. Not yet verified by the company.

TrackVia Inc. is SOC 2 Type II compliant. TrackVia Inc. also holds HIPAA.

Request report access Claim this profile

Framework

Auditor

Last report

Renewal

View official trust center ↗

About

Our customers trust TrackVia with their data and critical business applications across industries worldwide. To ensure we keep this trust, TrackVia instills industry best practices, robust security infrastructure, and comprehensive policies to protect the information and data of our clients, partners, and ourselves. [Main Website](https://trackvia.com) • [Status Page](https://status.trackvia.com) • [Knowledge Base](https://help.trackvia.com) • [TrackVia University](https://university.trackvia.com)

Compliance & infrastructure

SOC 2 Type II HIPAA

Hosting

AWS

Subprocessors

A
Amazon Web Services · Cloud provider
F
Formstack · Integration Partner
S
SendGrid (Twilio) · Email
W
Workato · Integration Partner

Compliance leadership

The person who leads TrackVia Inc.'s SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. TrackVia Inc.'s penetration test vendor isn't listed yet.

Claim this profile to add it.

Recent updates

New Report Available | 2025 Penetration and Application Testing Assessment ReportDec 2025

A report from our latest Penetration Test is now available on the Trust Center, which includes our internal management response. Testing and analysis was conducted between August and October of 2025 by Meditology Services. Access to the report requires NDA.

New Report Available | 2025 HIPAA Gap AnalysisNov 2025

Our latest HIPAA Gap Analysis, conducted by Meditology Services, is now available on the Trust Center. The analysis was conducted between August and October of 2025. Access to the report require NDA.

New Report Available | 2025 SOC 2 Type IINov 2025

Our SOC 2, Type II Examination Report, conducted by Meditology Services, is now available on the Trust Center. This report covers the period of September 1st, 2024 through July 31st, 2025. Access to the report will require NDA.

New Report Available | 2024 HIPAA Gap AnalysisFeb 2025

Our latest HIPAA Gap Analysis, conducted by Meditology Services, is now available on the Trust Center. The analysis was conducted between September and December of 2024. In addition to the gap analysis, a management response is also available for customer review. Access to the report and response letter require NDA.

New Report Available | 2024 SOC 2 Type IIJan 2025

Our SOC 2, Type II Examination Report, conducted by Meditology Services, is now available on the Trust Center. This report covers the period of August 1st, 2023 through August 31, 2024. Access to the report will require NDA.

This listing is partial

6/11 details · 55%

SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

Auditorraises trust
Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
Report dateraises trust
Add your most recent report period so buyers see how current your SOC 2 is.
Renewal date
Add your renewal window so buyers know your coverage is active.
Documents
List the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
Security controls
Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.

Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is TrackVia Inc. SOC 2 compliant?

TrackVia Inc. is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Is TrackVia Inc. HIPAA compliant?

According to TrackVia Inc.'s public trust center, TrackVia Inc. is HIPAA compliant. On SOC2C this listing is Listed.

Is TrackVia Inc. SOC 2 Type I or Type II?

TrackVia Inc. is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Can I use TrackVia Inc.'s SOC 2 for a vendor risk assessment?

Yes. TrackVia Inc.'s SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Is TrackVia Inc. penetration tested?

TrackVia Inc. hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Show 5 more questions

Answers published by TrackVia Inc.

Reproduced from TrackVia Inc.'s own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗

Do you encrypt data in-transit & at rest?

Data is encrypted in transit and at rest using AES-256, TLS v1.2.

How do you monitor for security breaches?

TrackVia leverages a variety of tools and systems to detect, prevent, and respond to potential threats. Routine vulnerability scanning is conducted internally, and critical access logs are centralized and configured with monitors that alert our team to suspicious activity.

Is there an SLA for resolving identified security issues?

Information Security Policies and internal procedure documents are in place to govern the response to known system vulnerabilities and other identified security events.

Does TrackVia conduct penetration tests?

TrackVia engages with a third-party penetration testing firm on an annual basis. All areas of the TrackVia products and cloud infrastructure are in-scope for these assessments.

Is vulnerability scanning and penetration testing performed?

Internal vulnerability scans are performed at least annually, and the results are recorded and acted on by our Information Security team. TrackVia's source code is subject to SAST and DAST scanning as part of our Software Development Lifecycle. Third Party Penetration testing is conducted annually on both our network and platform. An abbreviated report is available via our Trust Center.

How do I report a security or privacy concern?

Please send detailed information of your security or privacy concern to privacy@trackvia.com.

How often do you perform backups, and what is your retention schedule?

Full backups of customer data are taken daily and stored for 90 days. Customers data is automatically purged from our system 60 days after notice of contract termination.

What is the Shared Responsibility Model?

The shared responsibility model in cloud computing delineates the security responsibilities between the cloud service provider (CSP) and the cloud service consumer (CSC). TrackVia, acting as the cloud service provider, is responsible for the security of the software application, infrastructure, and network. The customer is responsible for the security of their account through access control and data management procedures. The Shared Responsibility Model also applies to TrackVia's relationship with Amazon Web Services (AWS). More details can be found here.

How is customer data segregated?

Customers who are contracted for a single-tenant private environment are configured with their own private server and network infrastructure, as well as a private AWS RDS database cluster. All HIPAA customers are configured with private database clusters by default, regardless of single or multi-tenant server/network infrastructure. Customers who are contracted for a multi-tenant public environment still have logical data segregation while servers, network infrastructure, and database clusters are shared.

Where can I find information about TrackVia's uptime and downtimes?

We recommend checking out our Status Page. This will give you the ability to subscribe for updates, view uptimes, be informed of any outages, and view historical data.

Do you support Single Sign-On (SSO)?

Yes, see our help center for more details.

What privacy/security settings are available?

Global admins can configure a password policy that defines complexity and rotation standards for all users in the account. Session timeout, IP Whitelisting, and Single Sign-on are also available for global admins to configure. More details can be found on our help center.

Show 7 more questions

Business & Industrial peers that completed SOC 2

Compare vs Newsworthy.ai Compare vs Octopus Deploy Compare vs 1099-Prep