Vecflow

Vecflow is SOC 2 Type II compliant. On SOC2C this listing is Listed.

According to Vecflow's public trust center, Vecflow is ISO 27001 certified. On SOC2C this listing is Listed.

Vecflow is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Yes. Vecflow's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Vecflow hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

August's security approach is comprehensive, focusing on both preventive measures and swift incident response. We enforce strict internal authentication and access control using unique user identifiers and hardware-backed FIDO2 multi-factor authentication for all personnel. Employee devices are centrally managed to adhere to our security policies, with data redundantly backed up across multiple data centers, primarily in the United States, unless otherwise specified by the client. August's secure development lifecycle incorporates industry best practices, including rigorous code reviews, static and dynamic application security testing. Our infrastructure is protected through network segmentation, firewalls, and Web Application Firewalls (WAFs), ensuring unauthorized access is prevented. Continuous security monitoring and intrusion detection systems are in place to identify and mitigate potential threats. In case of a security incident, August follows established incident response policies and regularly tested playbooks. Additionally, we conduct regular third-party offensive security assessments to evaluate and strengthen our security posture comprehensively.

Under a Non-Disclosure Agreement (NDA), August can provide our "Security Welcome Packet," which includes detailed information on our security practices. We are also prepared to share our SOC 2 Type 2 report, along with industry-standard questionnaires such as VSA-Full, SIG Lite, and CAIQv4, to expedite the Security/Risk review process.

August leverages Single Sign-On (SSO) with SAML for customer authentication. This allows firm administrators to centrally manage access to August and enforce security policies effectively. Users can seamlessly log in using their firm’s credentials, eliminating the need for an additional password.

August operates on Cloud providers, with all data processing and storage primarily occurring in the United States. We also offer support for data storage in other regions upon request to accommodate client needs.

Yes, August provides customers with the ability to request data deletion or export. We offer secure and compliant methods for data export, allowing you to retrieve your data in a commonly used format. For data deletion, we ensure that all data is permanently removed from our systems in accordance with industry best practices.