Question 1

Is TrackVia  Inc. SOC 2 compliant?

Accepted Answer

TrackVia  Inc. is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is TrackVia  Inc. HIPAA compliant?

Accepted Answer

According to TrackVia  Inc.'s public trust center, TrackVia  Inc. is HIPAA compliant. On SOC2C this listing is Listed.

Question 3

Is TrackVia  Inc. SOC 2 Type I or Type II?

Accepted Answer

TrackVia  Inc. is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use TrackVia  Inc.'s SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. TrackVia  Inc.'s SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is TrackVia  Inc. penetration tested?

Accepted Answer

TrackVia  Inc. hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Is TrackVia  Inc. secure?

Accepted Answer

Security isn't a single yes/no, but TrackVia  Inc. is SOC 2 Type II compliant and holds SOC 2 Type II, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 7

Does TrackVia  Inc. have a bug bounty or vulnerability disclosure program?

Accepted Answer

TrackVia  Inc. hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@trackvia.com or via a /security page (TrackVia  Inc. lists a security contact).

Question 8

Who are TrackVia  Inc.'s subprocessors?

Accepted Answer

TrackVia  Inc. lists 4 subprocessors on its trust center, including Amazon Web Services, Formstack, SendGrid (Twilio), Workato. Buyers use this for fourth-party risk review.

Question 9

Where does TrackVia  Inc. host or store data?

Accepted Answer

TrackVia  Inc. hosts on AWS. Data residency details are on its trust center.

Question 10

Where is TrackVia  Inc.'s trust center or security page?

Accepted Answer

TrackVia  Inc.'s trust center is at https://trust.trackvia.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 11

Do you encrypt data in-transit & at rest?

Accepted Answer

Data is encrypted in transit and at rest using AES-256, TLS v1.2.

Question 12

How do you monitor for security breaches?

Accepted Answer

TrackVia leverages a variety of tools and systems to detect, prevent, and respond to potential threats. Routine vulnerability scanning is conducted internally, and critical access logs are centralized and configured with monitors that alert our team to suspicious activity.

Question 13

Is there an SLA for resolving identified security issues?

Accepted Answer

Information Security Policies and internal procedure documents are in place to govern the response to known system vulnerabilities and other identified security events.

Question 14

Does TrackVia conduct penetration tests?

Accepted Answer

TrackVia engages with a third-party penetration testing firm on an annual basis. All areas of the TrackVia products and cloud infrastructure are in-scope for these assessments.

Question 15

Is vulnerability scanning and penetration testing performed?

Accepted Answer

Internal vulnerability scans are performed at least annually, and the results are recorded and acted on by our Information Security team. TrackVia's source code is subject to SAST and DAST scanning as part of our Software Development Lifecycle. Third Party Penetration testing is conducted annually on both our network and platform. An abbreviated report is available via our Trust Center.

Question 16

How do I report a security or privacy concern?

Accepted Answer

Please send detailed information of your security or privacy concern to privacy@trackvia.com.

Question 17

How often do you perform backups, and what is your retention schedule?

Accepted Answer

Full backups of customer data are taken daily and stored for 90 days. Customers data is automatically purged from our system 60 days after notice of contract termination.

Question 18

What is the Shared Responsibility Model?

Accepted Answer

The shared responsibility model in cloud computing delineates the security responsibilities between the cloud service provider (CSP) and the cloud service consumer (CSC). TrackVia, acting as the cloud service provider, is responsible for the security of the software application, infrastructure, and network. The customer is responsible for the security of their account through access control and data management procedures. The Shared Responsibility Model also applies to TrackVia's relationship with Amazon Web Services (AWS). More details can be found here.

Question 19

How is customer data segregated?

Accepted Answer

Customers who are contracted for a single-tenant private environment are configured with their own private server and network infrastructure, as well as a private AWS RDS database cluster. All HIPAA customers are configured with private database clusters by default, regardless of single or multi-tenant server/network infrastructure. Customers who are contracted for a multi-tenant public environment still have logical data segregation while servers, network infrastructure, and database clusters are shared.

Question 20

Where can I find information about TrackVia's uptime and downtimes?

Accepted Answer

We recommend checking out our Status Page. This will give you the ability to subscribe for updates, view uptimes, be informed of any outages, and view historical data.

Question 21

Do you support Single Sign-On (SSO)?

Accepted Answer

Yes, see our help center for more details.

Question 22

What privacy/security settings are available?

Accepted Answer

Global admins can configure a password policy that defines complexity and rotation standards for all users in the account. Session timeout, IP Whitelisting, and Single Sign-on are also available for global admins to configure. More details can be found on our help center.

TrackVia Inc.

About

Compliance & infrastructure

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Octopus Deploy

Newsworthy.ai

1099-Prep

Ask Ai