How Do I Get Gleam's SOC 2 Type II Report?
Email security@gleam.io and ask for it. Before we send anything, we'll ask you to agree not to share the documents outside your company. Once you've agreed, we send:
- our current SOC 2 Type II report, covering Security, Availability and Confidentiality
- a letter of attestation summarising our latest penetration test
We announced our first SOC 2 Type II audit in April 2022. It was carried out by Sensiba San Filippo and came back with a clean opinion and no noted exceptions.
For a vendor assessment, our Security page covers hosting, encryption, two-factor login, breach disclosure and payments, and our Privacy Policy lists our subprocessors and Data Protection Officer. If your team also needs a Data Processing Agreement, you can sign ours online.