SOC2C

Wethecollective security & compliance

An overview of Wethecollective's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type I, SOC 2 Type II
Penetration testNot listed
Subprocessors7 listed
HostingAWS
Trust centerView

Security questions about Wethecollective

Is Wethecollective secure?
Security isn't a single yes/no, but Wethecollective is SOC 2 Type II compliant and holds SOC 2 Type I, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Wethecollective have a bug bounty or vulnerability disclosure program?
Wethecollective hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@wethecollective.com or via a /security page (Wethecollective lists a security contact).
Who are Wethecollective's subprocessors?
Wethecollective lists 7 subprocessors on its trust center, including Amazon Web Services, Dropbox, Google Workspace, GitHub, Notion. Buyers use this for fourth-party risk review.
Where does Wethecollective host or store data?
Wethecollective hosts on AWS. Data residency details are on its trust center.
Where is Wethecollective's trust center or security page?
Wethecollective's trust center is at https://trust.wethecollective.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Wethecollective's full SOC 2 profile →