SOC2C

Xelix security & compliance

An overview of Xelix's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, ISO 27001
Penetration testNot listed
Subprocessors1 listed
HostingAWS
Trust centerView

Security questions about Xelix

Is Xelix secure?
Security isn't a single yes/no, but Xelix is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Xelix have a bug bounty or vulnerability disclosure program?
Xelix hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@xelix.com or via a /security page (Xelix lists a security contact).
Who are Xelix's subprocessors?
Xelix lists 1 subprocessor on its trust center, including Amazon Web Services. Buyers use this for fourth-party risk review.
Where does Xelix host or store data?
Xelix hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Xelix's trust center or security page?
Xelix's trust center is at https://trust.xelix.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Xelix's full SOC 2 profile →