Question 1

Is WorkJam SOC 2 compliant?

Accepted Answer

WorkJam is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is WorkJam ISO 27001 certified?

Accepted Answer

According to WorkJam's public trust center, WorkJam is ISO 27001 certified. On SOC2C this listing is Listed.

Question 3

Is WorkJam ISO 27017 certified?

Accepted Answer

According to WorkJam's public trust center, WorkJam is ISO 27017 certified. On SOC2C this listing is Listed.

Question 4

Is WorkJam CSA STAR certified?

Accepted Answer

According to WorkJam's public trust center, WorkJam is CSA STAR certified. On SOC2C this listing is Listed.

Question 5

Is WorkJam GDPR compliant?

Accepted Answer

According to WorkJam's public trust center, WorkJam is GDPR compliant. On SOC2C this listing is Listed.

Question 6

Is WorkJam HIPAA compliant?

Accepted Answer

According to WorkJam's public trust center, WorkJam is HIPAA compliant. On SOC2C this listing is Listed.

Question 7

Is WorkJam SOC 2 Type I or Type II?

Accepted Answer

WorkJam is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 8

Can I use WorkJam's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. WorkJam's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 9

Is WorkJam penetration tested?

Accepted Answer

Yes — WorkJam undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.

Question 10

Can I get WorkJam's SOC 2 report?

Accepted Answer

WorkJam's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 11

Does WorkJam have an ISO 27001 certificate?

Accepted Answer

WorkJam publishes an ISO certificate on its trust center; you can request access through SOC2C.

Question 12

Does WorkJam have a penetration test report?

Accepted Answer

WorkJam publishes a penetration test summary on its trust center. You can request access to it through SOC2C.

Question 13

Is WorkJam secure?

Accepted Answer

Security isn't a single yes/no, but WorkJam is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 27017, CSA STAR, GDPR, HIPAA, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 14

Does WorkJam have a bug bounty or vulnerability disclosure program?

Accepted Answer

WorkJam hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@workjam.com or via a /security page (WorkJam lists a security contact).

Question 15

Who are WorkJam's subprocessors?

Accepted Answer

WorkJam lists 1 subprocessor on its trust center, including Google Cloud Platform. Buyers use this for fourth-party risk review.

Question 16

Where does WorkJam host or store data?

Accepted Answer

WorkJam hosts on GCP. Data residency details are on its trust center.

Question 17

Where is WorkJam's trust center or security page?

Accepted Answer

WorkJam's trust center is at https://trustreport.workjam.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 18

How can I report a privacy concern or data incident involving my information?

Accepted Answer

You can report a privacy concern or data incident by emailing our dedicated privacy team at: privacy@workjam.com European residents may contact us at: privacy.europe@workjam.com We take privacy matters seriously and will address your concern promptly. Please visit our Privacy Policy for further details.

Question 19

Is WorkJam regularly audited for security compliance?

Accepted Answer

Yes, WorkJam undergoes annual independent audits to ensure continued compliance with SOC 2, ISO 27001 and ISO 27017 standards. We also perform internal audits and penetration testing to maintain a high security standard.

Question 20

How can I quickly reach the WorkJam Security Team for a security concern?

Accepted Answer

You can contact the WorkJam Security Team via email at: infosec@workjam.com If your issue requires immediate attention, please include "Priority" in the subject line to ensure a prompt response.

Question 21

How does WorkJam handle data or security breaches?

Accepted Answer

In the event of a data breach, WorkJam follows a comprehensive incident response plan. We notify affected users and regulators in accordance with legal requirements and take immediate steps to contain and mitigate the breach. We also conduct a post-incident analysis to improve our security posture and prevent future incidents.

Question 22

How does WorkJam ensure the security and compliance of its third-party providers?

Accepted Answer

WorkJam's third-party providers undergo thorough security assessments and compliance checks, including certifications such as SOC 2 and ISO 27001, while adhering to contractual obligations and privacy laws like GDPR and CCPA. To demonstrate our commitment to security, we perform ongoing assessments to evaluate their security posture, ensuring these providers remain compliant and maintain the highest standards in security practices.

Question 23

Is WorkJam compliant with GDPR?

Accepted Answer

WorkJam is GDPR compliant and has a DPO to help ensure your data is kept secure and used only in accordance with WorkJam's Privacy Policy. Data is protected at rest and in transit and is maintained in local data centres in your region.

Question 24

How does WorkJam ensure compliance with new and evolving regulations?

Accepted Answer

WorkJam continuously monitors changes in global regulations such as GDPR, CCPA, and others. We update our processes, policies, and platform features to stay compliant with these evolving regulations to ensure that our customers remain compliant as well.

Question 25

How does WorkJam manage and process customer data?

Accepted Answer

WorkJam manages and processes customer data in compliance with privacy laws and contractual obligations, ensuring strict data minimization and retention policies. Data would only be shared with customer consent to trusted third-party providers under strict agreements, and only without consent when legally required or for safety purposes.

WorkJam

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

1099-Prep

Octopus Deploy

Ask Ai