SOC2C

DraftWise Inc vs Action1

Side-by-side SOC 2 compliance: verification level, type, auditor, and renewal timing.

DraftWise Inc
draftwise.com
Action1
action1.com
VerificationListedListed
SOC 2 typeSOC 2 Type IISOC 2 Type II
Auditor
Last report
RenewalUnknownUnknown
RegionUnited States
Size1–50 employees1–50 employees
Certifications
SOC 2 Type ISOC 2 Type IIISO 27001GDPR
SOC 2 Type IIISO 27001HIPAAPCI DSSGDPR
Documents
  • [PenTest] DraftWise Letter of Attestation 2026-01-22.pdfOn request
  • Certificate of Cyber Insurance (2026)Public
  • 09-ISMS Procedure for Corrective Action and Continual Improvement (EN)On request
  • 07-ISMS Procedure for Internal Audits (EN)On request
  • 03-ISMS Roles, Responsibilities, and Authorities (EN)On request
  • 12-ISMS Relevant Laws, Regulations, and Contractual Requirements (EN)On request
  • 02-ISMS Information Security Management System (ISMS) Policy (EN)On request
  • 08-ISMS Procedure for Management Review (EN)On request
  • 05-ISMS Procedure for the Control of Documented Information (EN)On request
  • 04-ISMS Risk Assessment and Risk Treatment Process (EN)On request
  • 10-ISMS Information Security Objectives Plan (EN)On request
  • 01-ISMS Scope of the ISMS (EN)On request
  • 00-ISMS Master List of Documents (EN)On request
  • 06-ISMS Information Security Communication Plan (EN)On request
  • 11-ISMS Statement of Applicability (EN)On request
  • Secure Development PolicyOn request
  • Risk Management PolicyOn request
  • Physical Security PolicyOn request
  • Operations Security PolicyOn request
  • Information Security Roles and ResponsibilitiesOn request
  • Information Security Policy (AUP)On request
  • Incident Response PlanOn request
  • Human Resource Security PolicyOn request
  • Data Management PolicyOn request
  • Cryptography PolicyOn request
  • Code of ConductOn request
  • Business Continuity and Disaster Recovery PlanOn request
  • Asset Management PolicyOn request
  • Third-Party Management PolicyOn request
  • Access Control PolicyOn request
  • GDPR Incident Response Plan (EN)On request
Hosting
Subprocessors
Key controlsNot providedNot provided