Is this your company? Buyers are checking Webexpenses here. Claim webexpenses.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Webexpenses
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Webexpenses is SOC 2 compliant. Webexpenses also holds ISO 27001, PCI DSS, and GDPR.
About
Trusted by 2,000+ finance teams, Webexpenses easy-to-use expense management system improves expense efficiency, controls employee spend and generates significant cost savings.
Compliance & infrastructure
Hosting
AWS
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card information
Documents
2Subprocessors
11- AAmazon Web Services, Inc · Cloud computing services and Intelligent Document ProcessingUnited kingdom, EU region & Australia (APAC customers only)
- MMicrosoft · Operations, Mileage and Route CalculationUnited States
- CConnect My Apps · Integration PartnerEU Region
- GGoogle · OCREU Region
- MMicrosourcing Philippines · Support ServicesPhilippines
- PPendo.io, Inc · Product Analytics & Support Software ServicesEU Region
- SSage Intacct · Operations and Customer Services SupportEU Region - Ireland
- SSalesforce · Cloud-based CRM ServicesEU Region
- TTwilio (SendGrid) · Operations and Customer Services SupportUnited States
- WWise Payments · Payment ServicesUnited Kingdom
- JJotform.com · OperationsUnited Kingdom
Compliance leadership
The person who leads Webexpenses's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Webexpenses's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Webexpenses SOC 2 compliant?
Webexpenses is SOC 2 compliant. On SOC2C this listing is Listed.
Is Webexpenses ISO 27001 certified?
According to Webexpenses's public trust center, Webexpenses is ISO 27001 certified. On SOC2C this listing is Listed.
Is Webexpenses PCI DSS compliant?
According to Webexpenses's public trust center, Webexpenses is PCI DSS compliant. On SOC2C this listing is Listed.
Is Webexpenses GDPR compliant?
According to Webexpenses's public trust center, Webexpenses is GDPR compliant. On SOC2C this listing is Listed.
Can I use Webexpenses's SOC 2 for a vendor risk assessment?
Yes. Webexpenses's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Webexpenses penetration tested?
Webexpenses hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Webexpenses secure?
Security isn't a single yes/no, but Webexpenses is SOC 2 compliant and holds ISO 27001, PCI DSS, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Webexpenses have a bug bounty or vulnerability disclosure program?
Webexpenses hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@webexpenses.com or via a /security page (Webexpenses lists a security contact).
Who are Webexpenses's subprocessors?
Webexpenses lists 11 subprocessors on its trust center, including Amazon Web Services, Inc, Microsoft, Connect My Apps, Google, Microsourcing Philippines. Buyers use this for fourth-party risk review.
Where does Webexpenses host or store data?
Webexpenses hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information. Data residency details are on its trust center.
Where is Webexpenses's trust center or security page?
Webexpenses's trust center is at https://trust.webexpenses.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
How does Webexpenses align with customer's unique security needs?
We are committed to industry security best practices ensuring the confidentiality, integrity, and availability of our platform and customer data. This commitment is verified annually by external auditors to confirm compliance with internationally recognised security frameworks and regulations including GDPR, ISO 27001 and PCI DSS. See below links for more details https://www.webexpenses.com/news/iso-certification/ https://www.webexpenses.com/news/pci-dss-v4-0-certification/
Where is our customer's data stored?
Customer's data is stored on our data centres hosted with Amazon Web Services (AWS). For EMEA customers, these facilities are located in Ireland, France and the United Kingdom. For APAC customers, these facilities are located in Australia, France and the United Kingdom.
Where can I find Webexpenses status update information?
https://status.webexpenses.com/
What physical and environmental controls are in place to protect customer data?
Webexpenses is a SaaS hosted on AWS, an industry-leading and certified cloud platform. We review security certifications and practices of our sub-processors to ensure that there are appropriate physical security measures in force at the locations where Webexpenses customer data will be processed and stored.
Do you encrypt data in transit and at rest?
Yes, data is encrypted at rest through AES-256 and in transit using TLS 1.2+
What logical controls are in place to protect our customer data?
We have established access controls to authenticate users accessing systems that process customer data. These controls aim to prevent unauthorised access while leveraging the principle of least privilege so authorised users can access only appropriate data for their roles. Such controls include, but are not limited to multi-factor authentication (MFA), minimum password strength criteria and virtual private networks (VPNs) for admin user access. We have also implemented logging and monitoring mechanisms to record and monitor data access.
Does Webexpenses implement multi factor authentication (MFA)?
Yes, the MFA feature is available for all users of the Webexpenses platform.
Is Webexpenses Payment Card Industry Data Security Standard (PCI DSS) Compliant?
Yes, Webexpenses is PCI DSS 4.0 compliant and certified
Do you support Single Sign-On (SSO)?
Yes, Webexpenses supports SAML.
How does Webexpenses use customer data?
See our privacy policy for details. https://www.webexpenses.com/privacy-policy/
I found a product / security bug. Do you have an established bug bounty program?
Presently, we do not run a bug bounty program. However, security issues can be reported directly to your account manager.
Are penetration tests performed against the product?
Yes, an authorised CREST accredited 3rd party performs application and network penetration tests against Webexpenses annually at a minimum. Please contact your account manager for a copy of the penetration test documentation.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public