Is this your company? Buyers are checking Xactus here. Claim xactus.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Xactus
Sourced from public information. Not yet verified by the company.
Xactus is SOC 2 Type II compliant. Xactus also holds PCI DSS, and NIST CSF.
About
Xactus is a leading fintech committed to the continued transformation of the mortgage verification industry. Pioneering a new class of technology – Intelligent Verification – Xactus is redefining how the industry originates and services mortgages. With Xactus360, our industry-first Intelligent Verification PlatformSM, we put the full power of the market’s leading verification partner into a user-centric technology that harnesses real-time insights to power automated actions enabling clients to make faster, better decisions with the right data at the right time. By combining data-at-scale, adva
Compliance & infrastructure
Documents
1Subprocessors
7- AAmazon Web Services · Cloud Hosting ServicesUnited States
- MMicrosoft Azure · Cloud provider
- OOffice 365 · Collaboration
- FFive9 · Contact Center
- DDatadog · Cloud monitoring
- FFreshdesk · Customer support
- SShred-It, LLC
Compliance leadership
The person who leads Xactus's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Xactus's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
SOC 2 Bridge Gap Letter Available Upon RequestApr 2026
The SOC 2 bridge gap letter is available and requestable through the Trust Center as of April 15, 2026. It has been added as part of our available compliance documentation.
Axios - Supply Chain CompromiseMar 2026
Xactus does not utilize any of the affected versions of Axios, and thus, is unaffected by the most recent supply chain compromise.
CVE-2026-29000 - Vulnerability in "pac4j-jwt"Mar 2026
Xactus does not utilize the "pac4j-jwt" library and, as such, is unaffected by the recently announced vulnerability (CVE-2026-29000.)
MongoDB Server Vulnerability (CVE-2025-14847)Jan 2026
Xactus does not use MongoDB Server or any services that embed the affected MongoDB versions. As a result, we were not affected by CVE-2025-14847 and did not require any remediation actions related to this issue.
New PCI DSS v4.0.1 Attestation AvailableDec 2025
Xactus’ newest PCI DSS v4.0.1 SAQ-D Merchant attestation is now available for request on our Trust Center. This update reflects our current payment security controls and ongoing commitment to protecting cardholder data.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Xactus SOC 2 compliant?
Is Xactus PCI DSS compliant?
Is Xactus NIST CSF compliant?
Is Xactus SOC 2 Type I or Type II?
Can I use Xactus's SOC 2 for a vendor risk assessment?
Is Xactus penetration tested?
Is Xactus secure?
Does Xactus have a bug bounty or vulnerability disclosure program?
Who are Xactus's subprocessors?
Where does Xactus host or store data?
Where is Xactus's trust center or security page?
Will Xactus provide internal documentation as evidence as part of questionnaires or RFPs?
Business & Industrial peers that completed SOC 2
Newsworthy.ai
Octopus Deploy
1099-Prep
