Is this your company? Buyers are checking WebFX here. Claim webfx.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
WebFX
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
WebFX is SOC 2 Type II compliant.
About
WebFX is a tech-enabled digital marketing solutions provider, and we create custom strategies for each of our clients based on their needs and goals. If you'd like to know more about our security posture, feel free to reach out and contact trust@webfx.com!
Compliance & infrastructure
Documents
24Documents
- 2026 RCFX SOC 2 Final ReportRequest
- WebFX Certificate of InsuranceRequest
- Penetration TestRequest
- Acceptable Use PolicyPublic
- AI PolicyRequest
- Asset Management PolicyRequest
- Backup PolicyRequest
- Business Continuity and Disaster Recovery PlanRequest
- Code of ConductPublic
- Data Classification PolicyRequest
- Data Protection PolicyPublic
- Data Retention PolicyRequest
- Encryption PolicyRequest
- Incident Response PlanPublic
- Information Security PolicyPublic
- Password PolicyRequest
- Physical Security PolicyRequest
- Responsible Disclosure PolicyPublic
- Risk Assessment PolicyRequest
- Software Development Life Cycle Policy - Interactive TeamRequest
- Software Development Life Cycle Policy - MCFX TeamRequest
- Software Development Life Cycle Policy - TE TeamRequest
- System Access Control PolicyRequest
- Vulnerability Management PolicyRequest
Subprocessors
50- GGoogle · Digital MarketingUS
- NNutshell · Email Delivery and SMSUS
- OOmniSEO · AI SEO Opportunities and ResultsUS
- TTeamAI · AI-Enabled FunctionalityUS
- AAhrefs · Competitor Tracking
- AAnthropic · AI-Enabled FunctionalityUS, Ireland
- AAPIHub, Inc. (Clearbit) · Information EnhancementUS
- AAssemblyAI · Audio TranslationUS
- BBrightLocal · Local AnalyticsUK
- CCloudflare, Inc. · Cloud monitoringUS, EU
- CCM Group (Campaign Monitoring) · Email DeliveryUS, UK, EU, Australia
- CCookiebot · Consent Management PlatformUS, Ireland
Show all 50 subprocessorsShow fewer
- CCrazy Egg · Digital MarketingUS
- DData Axle Inc. · Information EnhancementUS
- DDatadog · Text search and log analyticsUS, Germany
- DDromo · Data UploaderUS
- EElasticsearch B.V. · Text search and analyticsUS
- EEntri · Manage Custom DomainsUS
- EExa · Content Retrieval
- FFullContact Inc. · Information EnhancementUS
- GGrammarly Inc. · Customer CommunicationsUS
- IImprovado · Client ReportingUS
- IIntuit, Inc. · Email DeliveryUS
- LLaunchDarkly · Application ManagementUS, EU
- LLiveRamp Inc. · Digital MarketingUS
- LLooker · Digital MarketingUS
- MMailchimp / Mandrill · Email DeliveryUS
- MMeridian · AI-Enabled FunctionalityUS
- MMeta Platforms Inc. · Digital MarketingUS
- MMicrosoft · Digital MarketingUS
- NNinjaCat · Client ReportingUS
- OOmniconvert · Digital MarketingUS
- OOOPSpam · Information EnhancementUS, Germany
- OOpenAI · AI-Enabled FunctionalityUS
- PPendo · AnalyticsUS
- PPeople Data Labs · Information EnhancementUS
- PPinterest Inc. · Digital MarketingUS
- SSEMRush · Competitor TrackingUS
- SSentry · Application Performance Monitoring and Error TrackingUS, Germany
- SSimilarweb · Competitor TrackingUS
- SSimplify · Digital MarketingUS
- SSpyFu · Competitor TrackingUS
- SSynup · Local AnalyticsUS
- TThe Trade Desk · Digital MarketingUS
- TThum.io · Website Screenshots
- TTwilio Inc. · Communications and Telephone ServicesUS
- VVanta · SecurityUS
- VVertex AI · AI-Enabled FunctionalityUS
- WWorkato · Data IntegrationUS, Germany
- ZZapier · Data IntegrationUS
Compliance leadership
The person who leads WebFX's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. WebFX's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
5/11 details · 45%SOC2C shows the verified essentials. 6 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is WebFX SOC 2 compliant?
WebFX is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is WebFX SOC 2 Type I or Type II?
WebFX is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use WebFX's SOC 2 for a vendor risk assessment?
Yes. WebFX's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is WebFX penetration tested?
WebFX hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get WebFX's SOC 2 report?
WebFX's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is WebFX secure?
Security isn't a single yes/no, but WebFX is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does WebFX have a bug bounty or vulnerability disclosure program?
WebFX hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@webfx.com or via a /security page (WebFX lists a security contact).
Who are WebFX's subprocessors?
WebFX lists 50 subprocessors on its trust center, including Google, Nutshell, OmniSEO, TeamAI, Ahrefs. Buyers use this for fourth-party risk review.
Where does WebFX host or store data?
WebFX's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is WebFX's trust center or security page?
WebFX's trust center is at https://trust.webfx.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
If I have any additional concerns, questions, or thoughts regarding WebFX's Trust Center, who should I contact?
Feel feel to email trust@webfx.com if you have any additional concerns, questions, or thoughts regarding WebFX's Trust Center!
Does WebFX have a SOC 2 report?
Yes! WebFX received a SOC 2 Type 1 report for RevenueCloudFX in February 2026!
How does WebFX process client data?
Questions regarding data processing are covered in our Data Processing Agreement: https://www.marketingcloudfx.com/marketingcloudfx-terms-conditions/#/dpa
What mobile device management (MDM) solution(s) does WebFX leverage to protect its computers?
All computers (or endpoints) are managed via Microsoft Endpoint Manager (Windows) or Jamf (Mac). Through these management tools, several security-related policies are enforced to require full disk encryption, antivirus and malware protection, firewall rules, and many other controls. Our MDM solutions also allow us to remotely wipe any managed endpoint.
How does WebFX encrypt data?
The majority of our data is stored within Google Cloud Platform, which applies encryption at rest and in transit automatically. When any authentication credentials into our proprietary systems are stored, they are hashed using the following method: https://github.com/dcodeIO/bcrypt.js. For additional information, feel free to review our Encryption Policy in our Trust Center!
What steps are taken to ensure only authorized individuals have access to information necessary for their roles?
All access to WebFX critical systems and services is reviewed and updated on a monthly basis to ensure proper authorizations are in place and access levels align with each individual's role. For additional information, feel free to review our System Access Control Policy in our Trust Center!
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public