Snapshot 149191
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content CARTO Securing your data is CARTO's greatest responsibility, and ensuring your peace of mind is at the core of everything we do. We combine expertise, vigilance, and consistency to keep you safe. Compliance SOC 2 GDPR Resources View all SOC 2 Type II Report (Nov24-Nov25) — Valid until Nov26 Incident Response Plan Operations Security Policy Information Security Policy (AUP) Data Management Policy Access Control Policy Secure Development Policy Cryptography Policy Information Security Roles and Responsibilities Asset Management Policy Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 18 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and disaster recovery plans tested Cybersecurity insurance maintained View 33 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established FAQ Updates View all General Updated latest SOC 2 Report Published February 9, 2026 We have uploaded the latest SOC 2 Type 2 Report for CARTO, applicable to the November 2024 to November 2025 period, and valid until November 2026. General Updated newest SOC 2 report Published March 4, 2025 We've just uploaded our latest SOC 2 type 2 report