Snapshot 212891
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Welcome to ProdPad’s Trust and Compliance Program At ProdPad, trust is woven into the fabric of everything we do. To keep your data safe and private, we deploy industry-leading safeguards for security and to manage our systems. To earn your trust, we make it a point to transparently share our security and compliance program with you. All the information that we share with you is a real-time feed from the compliance program in TrustCloud. We continuously monitor, test, improve, and share our security, and compliance program, so you can rest easy knowing that we are safely managing the integrity of your data, and continue to be conscientious about the trust bestowed in us. Looking for something specific? Search across ProdPad’s security, trust, and compliance program 2 Certifications SOC 2 Type II · 1 ProdPad has successfully completed a Service Organization Control 2 (SOC 2) Type II audit of our control environment via an independent assessment by a certified auditor. Learn MoreRequest Access Cyber Essentials · 1 At ProdPad, we are committed to the security and privacy of your data, and we strive to help our customers and users understand and, where applicable, comply with, CISA's Cyber Essentials. Learn MoreRequest Access 8 Documents Cookie policy CreateShift CAIQ_Lite 21DEC2023-xlsx - CAIQ_Lite Master Services Agreement Privacy policy Security and Compliance FAQ Service Level Agreement Pen Testing Request Access ProdPad SOC 2 Type II Report Request Access 18 Policies Application Security ·4 Access Control Policy Authentication and Password Policy Change Management Policy Vulnerability Management Policy View All Data Security and Privacy ·4 Data Classification Policy Data Retention and Disposal Policy Encryption Policy Information Security Policy View All Infrastructure Security ·4 Asset Management Policy Audit Logging Policy Backup Policy Business Continuity Policy View All Security Operations ·6 Acceptable Use Policy Human Resources Policy Physical Security Policy Risk Management Policy View All 102 Continuously Monitored Controls Applications · 3 Encryption Documentation Source Control Static Code Analysis Business Operations Process · 15 Breach Notification Business Continuity / Disaster Recovery Program Control reviews Control selection Corrective actions See 10 more controls Cloud Infrastructure · 8 Datacenters Firewalls Host hardening Infrastructure-as-code Patch Management See 3 more controls Customers · 6 Documentation site Master Services Agreement Privacy Policy Release Notifications Support channel See 1 more control Data · 7 Data Disposal Data Retention Data classification Data in transit encryption Data store encryption See 2 more controls IT Infrastructure · 4 Acceptable Use Inventory System Inventory Workstations - OS Identity and Access Control · 9 Administrative access Customer Confidential Systems Access Review Least-privilege access Multi-factor authentication (MFA) Password Configurations See 4 more controls Monitoring · 4 Centralized Logging Performance monitoring Security Event Logging Security Event Review Other Controls · 6 Data Handling Explicit Consent Individual's Preferences Personal Data Retention Remedial Action See 1 more control People · 14 Background checks Board Independence Board Oversight Board of Directors Confidentiality agreement See 9 more controls Privacy · 9 Appeal Adverse Decision Complaints Handling Data Access Requests Data Protection Agreements Data Subject Access Request Procedures See 4 more controls Product Delivery Process · 13 Agile Process Backup Plan Backup Retention Backup Storage Capacity Planning See 8 more controls Vendors · 4 Inventory and classification Vendor Agreements Vendor Monitoring Vendor risk assessment 2 Subprocessors ProdPad uses the third-party subprocessors below to process customer data Amazon Web Services M Mailgun 1 Trust Leadership We believe that compliance is the responsibility of the entire company, and we have team members at different parts of the company who own and drive our compliance initiatives. Simon CastCTIO Request Access Interested in Learning More? Request access and we can share more information about our trust and compliance program.