Question 1

Is Unifygtm SOC 2 compliant?

Accepted Answer

Unifygtm is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Unifygtm SOC 2 Type I or Type II?

Accepted Answer

Unifygtm is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 3

Can I use Unifygtm's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Unifygtm's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 4

Is Unifygtm penetration tested?

Accepted Answer

Unifygtm hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 5

Is Unifygtm secure?

Accepted Answer

Security isn't a single yes/no, but Unifygtm is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 6

Does Unifygtm have a bug bounty or vulnerability disclosure program?

Accepted Answer

Unifygtm hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@unifygtm.com or via a /security page (Unifygtm lists a security contact).

Question 7

Who are Unifygtm's subprocessors?

Accepted Answer

Unifygtm lists 14 subprocessors on its trust center, including Amazon Web Services, Anthropic, Auth0, Clickhouse , Datadog. Buyers use this for fourth-party risk review.

Question 8

Where does Unifygtm host or store data?

Accepted Answer

Unifygtm hosts on AWS. Data residency details are on its trust center.

Question 9

Where is Unifygtm's trust center or security page?

Accepted Answer

Unifygtm's trust center is at https://trust.unifygtm.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 10

Does Unify support Single Sign-On (SSO)?

Accepted Answer

Unify supports SAML SSO login on enterprise plans with SCIM support coming soon. In addition, Google Workspace SSO login is available on all plans. All authentication is powered by Auth0, an industry leading provider.

Question 11

Do you perform annual security awareness and privacy training?

Accepted Answer

We deliver annual information security training along with formal privacy trainings which are both completed and tracked via Vanta.

Question 12

Is Unify SOC 2 compliant?

Accepted Answer

Yes, Unify maintains SOC 2 Type II compliance. You can find copy of our compliance report in the Resources section of our trust center.

Question 13

Does Unify conduct penetration testing?

Accepted Answer

Yes, Unify conducts annual (at a minumum) pen testing by external security firms. You can find a copy of our most recent penetration test report in the Resources section of our trust center.

Question 14

Is Unify compliant with GDPR and CCPA?

Accepted Answer

Yes, Unify is fully compliant with GDPR and CCPA laws.

Question 15

Is Unify compliant with the CAN-SPAM Act?

Accepted Answer

Yes, Unify is fully compliant with CAN-SPAM.

Question 16

Do you consider yourself a controller or processor your customer's data? or both?

Accepted Answer

Please review our DPA for a detailed description of how/when we consider ourselves a controller vs processor.

Question 17

Is data in Unify encrypted?

Accepted Answer

Yes, Unify enforces encryption-at-rest for all storage of customer data and encryption-in-transit for all data transfer across our private network boundary. End-to-end encryption is used wherever possible and data is never stored in untrusted locations.

Question 18

How many data subprocessors does Unify use?

Accepted Answer

Unify maintains a very limited set of external subprocessors compared to other vendors in order to limit the risk of exposure to a third party security breach. All data processors are rigorously vetted to ensure they adhere to our security standards. The full list of authorized subprocessors is published here.

Question 19

Where can I find Unify's Customer Data Processing Agreement (DPA)?

Accepted Answer

Unify's customer data processing agreement is available here.

Question 20

What categories of data do you process, and how do you ensure secure handling?

Accepted Answer

We implement industry standard data protection techniques, including strict access control and encryption for data in transit and at rest. Examples of data we process 1. Commercial Information — Most customers choose to connect their CRM to Unify which gives us access to sales, marketing, financial, customer, and other data that falls under this category. However, the customer has full discretion as to what data Unify receives and can limit our access however they desire. 2. Geolocation — Unify collects website traffic data which includes limited geolocation data (e.g., IP address can be used to infer location). We display this in the product for users to take advantage of. 3. Employment Information — If a CRM is connected, Unify may have access to some employment information, such as names and titles. 4. Browsing information 5. Basic PII such as contact details

Question 21

Do you store or move data to locations outside of the US?

Accepted Answer

No, data does not move outside of the United States.

Unifygtm

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Octopus Deploy

Newsworthy.ai

1099-Prep

Ask Ai