Is this your company? Buyers are checking TravelBank here. Claim travelbank.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
TravelBank
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
TravelBank is SOC 2 compliant. TravelBank also holds ISO 27001.
About
You can have the best of both worlds. We're committed to providing a secure platform for managing your expense and travel data, while delivering world class products and service.
Compliance & infrastructure
Hosting
AWS
Data handled
Customer personally identifiable informationCredit card informationPersonal health information
Documents
2Subprocessors
47- AAmazon Web Services · aws
- AAmplitude
- DDatadog · datadog
- AAppcues
- 884 Codes
- AApple
- CCasto Travel
- AAtlassian
- BBranch
- CConfluence · confluence
- CCornerstone Information Systems
- DDelighted
Show all 47 subprocessorsShow fewer
- DDialpad
- DDocker
- DDrift
- DDuffel
- EEAN
- GGitHub · github
- GGong
- HHubspot
- IImgx
- IInmoment
- IInstabug
- IIntercom
- IIntercom · intercom
- JJira · jira
- MMagnatech
- MMetabase
- MMicrosoft/appcenter
- MMimiquate
- OOutreach
- PPlaid
- PPrimalSkill
- PPubNub
- RRouteHappy
- SSalesforce · salesforce
- SScalegrid
- SSegment
- SSquake
- SStripe
- SStrongDM
- TTravelport
- TTray
- TTwilio/Sendgrid
- VVanta
- VVery Good Security
- WWP Engine
Compliance leadership
The person who leads TravelBank's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. TravelBank's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is TravelBank SOC 2 compliant?
TravelBank is SOC 2 compliant. On SOC2C this listing is Listed.
Is TravelBank ISO 27001 certified?
According to TravelBank's public trust center, TravelBank is ISO 27001 certified. On SOC2C this listing is Listed.
Can I use TravelBank's SOC 2 for a vendor risk assessment?
Yes. TravelBank's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is TravelBank penetration tested?
Yes — TravelBank undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Does TravelBank have an ISO 27001 certificate?
TravelBank publishes an ISO certificate on its trust center; you can request access through SOC2C.
Does TravelBank have a penetration test report?
TravelBank publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Is TravelBank secure?
Security isn't a single yes/no, but TravelBank is SOC 2 compliant, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does TravelBank have a bug bounty or vulnerability disclosure program?
TravelBank hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@travelbank.com or via a /security page (TravelBank lists a security contact).
Who are TravelBank's subprocessors?
TravelBank lists 47 subprocessors on its trust center, including Amazon Web Services, Amplitude, Datadog, Appcues, 84 Codes. Buyers use this for fourth-party risk review.
Where does TravelBank host or store data?
TravelBank hosts on AWS, and handles Customer personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is TravelBank's trust center or security page?
TravelBank's trust center is at https://trust.travelbank.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Do you support Single Sign-On (SSO)?
TravelBank supports many industry standard SSO partners and protocols including OKTA and Azure, openid connect and SAML
What security measures do you have in place?
TravelBank is hosted in AWS and utilizes security tools from AWS and Datadog including SIEM, IDS, application security scanning and WAF to ensure all environments and networks are protected
What sort of vendor oversight do you maintain
TravelBank having been acquired by US Bank in 2021 is under strict vendor management control. US Bank manages all TPRM processes and ensures all vendors are monitored regularly
What is TravelBank's Business Continuity and Disaster Recovery Plan?
TravelBank performs tabletop and functional recovery exercises at least annually testing for several potential outage scenarios
Does TravelBank carry Cyber Security Insurance
TravelBank maintains Cyber Security Insurance. Customer's may request the certificate of insurance by contacting support.
Do you have SOC 1 or 2 reports available?
TravelBank does not currently do any SOC reporting, however, we do maintain ISO 27001 certification which is regularly audited. Customers should feel certain that we maintain a high security standard
Do you encrypt data at rest?
TravelBank uses LUKS AES-256 encryption for all data at rest
Do you encrypt data in transit?
Data in transit is encrypted using TLSv1.2 or later
