SOC2C

WorkJam security & compliance

An overview of WorkJam's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, ISO 27001, ISO 27017, CSA STAR, GDPR, HIPAA
Penetration testNot listed
Subprocessors1 listed
HostingGCP
Trust centerView

Security questions about WorkJam

Is WorkJam secure?
Security isn't a single yes/no, but WorkJam is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, ISO 27017, CSA STAR, GDPR, HIPAA, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does WorkJam have a bug bounty or vulnerability disclosure program?
WorkJam hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@workjam.com or via a /security page (WorkJam lists a security contact).
Who are WorkJam's subprocessors?
WorkJam lists 1 subprocessor on its trust center, including Google Cloud Platform. Buyers use this for fourth-party risk review.
Where does WorkJam host or store data?
WorkJam hosts on GCP. Data residency details are on its trust center.
Where is WorkJam's trust center or security page?
WorkJam's trust center is at https://trustreport.workjam.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See WorkJam's full SOC 2 profile →