Is this your company? Buyers are checking Pomegranate Technologies Inc here. Claim usepepper.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Pomegranate Technologies Inc
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Pomegranate Technologies Inc is SOC 2 Type I compliant.
About
Pepper is the most trusted technology partner for distributors and manufacturers to power eCommerce, digital advertising, and more.
Compliance & infrastructure
Hosting
AWS
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card information
Subprocessors
6- AAmazon Web Services · Cloud provider
- GGoogle Workspace · Identity provider
- GGitHub · Version control
- SSnowflake · Data storage and processing
- SSlack · Collaboration
- SSentry · Cloud monitoring
Compliance leadership
The person who leads Pomegranate Technologies Inc's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Pomegranate Technologies Inc's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
5/11 details · 45%SOC2C shows the verified essentials. 6 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Pomegranate Technologies Inc SOC 2 compliant?
Pomegranate Technologies Inc is SOC 2 Type I compliant. On SOC2C this listing is Listed.
Is Pomegranate Technologies Inc SOC 2 Type I or Type II?
Pomegranate Technologies Inc is SOC 2 Type I compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Pomegranate Technologies Inc's SOC 2 for a vendor risk assessment?
Yes. Pomegranate Technologies Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Pomegranate Technologies Inc penetration tested?
Pomegranate Technologies Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Pomegranate Technologies Inc secure?
Security isn't a single yes/no, but Pomegranate Technologies Inc is SOC 2 Type I compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Pomegranate Technologies Inc have a bug bounty or vulnerability disclosure program?
Pomegranate Technologies Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@usepepper.com or via a /security page (Pomegranate Technologies Inc lists a security contact).
Who are Pomegranate Technologies Inc's subprocessors?
Pomegranate Technologies Inc lists 6 subprocessors on its trust center, including Amazon Web Services, Google Workspace, GitHub, Snowflake, Slack. Buyers use this for fourth-party risk review.
Where does Pomegranate Technologies Inc host or store data?
Pomegranate Technologies Inc hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information. Data residency details are on its trust center.
Where is Pomegranate Technologies Inc's trust center or security page?
Pomegranate Technologies Inc's trust center is at https://trust.usepepper.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Pomegranate Technologies Inc
Reproduced from Pomegranate Technologies Inc's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
Where can I check if Pepper systems are operational?
You can view the operational status of Pepper systems on our status page: https://pepper.statuspage.io.
How do I contact Pepper’s support team?
You can contact our support team via email at support@usepepper.com. For questions related to security, please reach out to security@usepepper.com.
Where are your servers located?
Our servers are hosted across multiple AWS data centers, ensuring redundancy and availability.
How can I get access to your security policies and questionnaires?
Request for access can be made through our Trust Portal: trust.usepepper.com.
Do you conduct regular security audits?
Yes, we conduct internal and external security audits to ensure compliance with SOC 2 and other standards.
Do you encrypt data at rest?
All data is encrypted at rest using AES-256 encryption, ensuring data security across our infrastructure.
How do you handle the data we collect?
Collected data is used only for purposes outlined in our privacy policy. It is stored securely and processed according to relevant data protection regulations
Is there an SLA for resolving identified security issues?
Yes, we follow SLAs based on the severity of the issue. Critical issues are addressed within 24 hours, with clear escalation procedures in place.
How do you monitor for security breaches?
We use advanced monitoring tools to detect anomalies and potential threats. Alerts are triggered in real-time to our incident response team.
How do you manage access to sensitive data?
We enforce role-based access control (RBAC) to ensure only authorized users can access sensitive data.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public