Traild Software

Traild Software publishes an ISO certificate on its trust center; you can request access through SOC2C.

Traild Software's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Security isn't a single yes/no, but Traild Software is SOC 2 Type II compliant and holds ISO 27001, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Traild Software hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@traildsoftware.com or via a /security page.

Traild Software lists 14 subprocessors on its trust center, including Google Cloud Platform, Zendesk, Twilio, Office 365, Custify. Buyers use this for fourth-party risk review.

Traild Software hosts on GCP, Azure. Data residency details are on its trust center.

Traild Software's trust center is at https://trust.traildsoftware.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Traild is certified to ISO/IEC 27001:2022 and maintains SOC 2 Type 2 compliance. Certification was renewed in May 2025 and is valid until May 2028, with external audits conducted annually to confirm ongoing compliance. Traild’s SOC 2 Type 2 report and ISO/IEC 27001:2022 certificate are available on request via the Traild Trust Centre.

Customers retain ownership of their data at all times. Traild only processes customer data for the purpose of delivering its services. Once data is anonymized such that no individual or customer can be identified, it may be used to improve Traild’s services, train proprietary AI models, and generate aggregated insights. This aggregated and anonymized data cannot be traced back to any customer and is never sold, never shared externally except with subprocessors under contract, and is not used to train third-party models.

TRAILD uses aggregated and de-identified customer data to improve the performance of its own proprietary AI models and does not train third-party LLMs. The use of aggregated data is fundamental to the provision of TRAILD services, as TRAILD’s AP product leverages AI to conduct risk assessments during AP processing. TRAILD is therefore unable to offer an opt-out from this aggregated use. Identifiable customer data is never used for these purposes, and anonymized or aggregated data is not used to train third-party models. TRAILD engages a small number of approved subprocessors, listed in the TRAILD Trust Center.

Yes. TRAILD can host customer data entirely within the USA, EU, UK, Canada, or Australia. Feature availability may vary depending on regional compliance and infrastructure requirements.

Admin users can download customer data via the Reports tab, or request CSV or XML extracts. Customers may request access to their data for 30 days after termination.

Yes. TRAILD’s Privacy Policy sets out how customer data is collected, used, and protected. The policy is available at https://traildsoftware.com/privacy-policy/.

TRAILD provides audit logs covering successful and failed login attempts, invoice exports, transactional activity, and key system events. Logs are monitored as part of TRAILD’s ISMS to detect unauthorized activity.

TRAILD data is hosted in Google Cloud Platform (GCP). 1. Data at rest is encrypted using AES-256. 2. Data in transit is encrypted via TLS over HTTPS. 3. GCP-managed domain validation SSL certificates secure public endpoints. 4. Internal service-to-service traffic uses AES-128-GCM network-layer encryption.

Yes. Production and non-production environments are logically separated. Production data is not replicated into test or development environments. Where test data is needed, it is anonymized or de-identified.

TRAILD is built on Google Cloud and scales dynamically to meet demand. It supports organizations processing 100,000+ invoices per month without performance impact.

Backups are taken daily, encrypted, stored offsite across multiple geographies, and tested regularly to confirm restorability.

TRAILD applies least-privilege principles through role-based access controls. Permissions are assigned based on job functions, reviewed regularly, and logged to ensure only authorized users have access to sensitive data.