Is this your company? Buyers are checking Younium AB Inc here. Claim younium.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Younium AB Inc
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Younium AB Inc is SOC 2 Type II compliant. Younium AB Inc also holds GDPR.
About
Younium headquarters in Stockholm, Sweden. Younium offers a subscription management platform for B2B companies. With the Younium platform users manage, invoice and automate bookkeeping and revenue recognition for their customers subscriptions. At Younium information security and protecting our customers data is of highest priority therefor we continuously work to communicate our efforts. Most of our efforts to do so is documented below. If you have any additional questions do not hesitate to reach out.
Compliance & infrastructure
Hosting
Azure
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Documents
3Subprocessors
7- CCyclr · Integration platform to enable Younium to setup integrations to customer specifiUK
- FFrontegg · Authentication platform to enable extended login functionalityEurope
- MMicrosoft Azure · Provider of the cloud computing platformEurope
- SSendgrid Inc · E-mail delivery services for internal email to the Controller’s users.US
- SStartDeliver · Customer success tool to onboard and maintain customersEurope
- HHubspot · MarketingEU
- UUserPilot · Product and designEU
Compliance leadership
The person who leads Younium AB Inc's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Younium AB Inc's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Ensuring Data Security Standards: Younium Achieves SOC 2 ComplianceApr 2024
We're proud to announce that Younium is now SOC 2 compliant, marking a significant milestone in our dedication to safeguarding our clients' and their customers' security and privacy. SOC 2 compliance represents a transformative shift in how we approach data security, ensuring that our subscription management software remains at the forefront of trustworthiness and reliability.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Younium AB Inc SOC 2 compliant?
Younium AB Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Younium AB Inc GDPR compliant?
According to Younium AB Inc's public trust center, Younium AB Inc is GDPR compliant. On SOC2C this listing is Listed.
Is Younium AB Inc SOC 2 Type I or Type II?
Younium AB Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Younium AB Inc's SOC 2 for a vendor risk assessment?
Yes. Younium AB Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Younium AB Inc penetration tested?
Yes — Younium AB Inc undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.
Can I get Younium AB Inc's SOC 2 report?
Younium AB Inc's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Does Younium AB Inc have a penetration test report?
Younium AB Inc publishes a penetration test summary on its trust center. You can request access to it through SOC2C.
Is Younium AB Inc secure?
Security isn't a single yes/no, but Younium AB Inc is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Younium AB Inc have a bug bounty or vulnerability disclosure program?
Younium AB Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@younium.com or via a /security page (Younium AB Inc lists a security contact).
Who are Younium AB Inc's subprocessors?
Younium AB Inc lists 7 subprocessors on its trust center, including Cyclr, Frontegg, Microsoft Azure, Sendgrid Inc, StartDeliver. Buyers use this for fourth-party risk review.
Where does Younium AB Inc host or store data?
Younium AB Inc hosts on Azure, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Younium AB Inc's trust center or security page?
Younium AB Inc's trust center is at https://trust.younium.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Younium AB Inc
Reproduced from Younium AB Inc's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
Does Younium have a privacy policy?
yes, for more information about Privacy policy, visit Youniums public privacy policy
What is Youniums data and retention policy?
Younium stores customer data as long as the customer is using the service. If the customer will no longer use the service all customer data will be removed from the cloud. Before data is removed the data can be exported to the customer using a format agreed upon between the customer and Younium
Will Younium enclose customer data to third parties?
Younium will not disclose customer data to a third party (including law enforcement, other government entity or civil litigant) except by request from customer or required by law. If compelled to disclose customer data to a third party, we will promptly notify the customer and provide a copy of the demand, unless legally prohibited from doing so. This policy is in line with Microsoft's policy for Microsoft Azure. Read more here: [](https://www.microsoft.com/en-us/trustcenter)https://www.microsoft.com/en-us/trustcenter
How is Younium ensuring GDPR compliance?
- Younium only processes our customers and their customers data according to the signed Data Processing Agreement - Younium ensures strong security measures to prohibit unauthorized access to the personal data. This includes encryption of data and access control.
What service login does Younium offer?
Younium customers can select to either use the built in user login with email and password login, or a SSO connection where users are authenticated using the customers own identity provider (IdP) Multi-Factor Authentication Younium customers can choose to enable multi-factor authentication for their access to the Younium service by using built in MFA support for authenticator app using QR code. If SSO is used, the MFA options provided by their identity provider can be used. Single Sign On (SSO) Younium offers SSO configuration using either SAML or Open ID Connect (OIDC). When using SSO, the options for multi-factor authentication are tied to the identity provider the customer connects to Younium. Logging Younium logs all application actions on the API level. Logs are stored with 30 days retention.
Do Younium encrypt data at rest?
All customer data hosted by Younium is encrypted using Microsoft Azure hosted keys 256-bit AES . The data transit is also encrypted at rest for application data, backups, and logs generated. [https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest]
Do Younium encrypt data at Transit
All Younium web applications and API services use HTTPS (HTTP over SSL). Any requests made to the Younium services require TLS protocol set to 1.2 minimum (1.3 Supported) A CDN global load balancing service handling the HTTPS certificate management for all publicly exposed services.
How do Younium backup customer data?
The built-in fault tolerance capabilities of Microsoft Azure protect customer data from individual server, network, and device failures. However, in order to protect customer data against user or application errors or a total loss of a region, Younium does also create a separate backup of the data. Incremental or full database backups are encrypted and managed by Microsoft. Additional geo-replicated backups are enabled on the critical cloud services hosting the customer’s data (Aligned with GDPR compliance).
Where is Younium data located?
Customer data is stored Globally, within Microsoft Azures cloud: - EU Wester Europe; Amsterdam - US East US; Virginia The region is agreed upon onboarding to Younium Failover Azure configuration data such as storage account replication is located in the Microsoft Azure North Europe region based in Ireland.
How does Younium ensure recovery in case of a disaster?
The recovery time objection (RTO) defines the duration of time and service level acceptable to restore the services after an incident, this one is handled based on the severity and type of incident encountered. The recovery point also called (RPO) in case of major data loss or corruption is strongly related to the Azure cloud services SLA and backup capabilities. Example scenarios: An extended outage of the Azure Cloud region West Europe Application error corrupts data and/or causes data loss (Single or all tenants) User (or application) error causes corrupt and irrecoverable data for a tenant The most critical Younium services are geo-replicated across different Azure regions. For example, the load balancer which routes the ingress network traffic can be routed to a passive instance in case of a major issue is detected.
What is Youniums data breach process?
Threat detection monitoring services are enabled to detect and notify the infrastructure administrators in case of suspicious data exfiltration and abnormal behavior detection. Security breaches and vulnerabilities detected are assessed by the different team's stakeholders as soon as the information has been generated. Once the severity level and scope of the issue have been assigned to the incident, all impacted customers will be contacted as soon as possible with the details and information available. Follow-up notifications including updates and status updates will also be sent out until the incident resolution. The severity level assigned during the initial assessment will then be discuss with the product and customer success managers before sending a nofication to the impacted customers.
How does Younium ensure availability & reliability?
Monitoring The availability and monitoring of the different services is managed via a combination of Datadog & Azure alerts. Each Younium service has a dedicated set of monitoring alerts, these ones are based on fixed or dynamic metrics thresholds. Custom logs generated by the application are processed and analyzed using the Datadog platform. Scaling The Younium architecture which combines a load balancer as an entry point and the Azure Paas services as the backend allows these different backend services to be scaled in case of performance issues or unexpected load increases. Status On the link below, the status and health of Younium and its integrations is presented. Current and past incidents are listed on this page. https://status.eu.younium.com/
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public