Snapshot 219361

Document
Trust center
URL
https://trust.reco.ai/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
453509 bytes
SHA-256 (raw)
0dc492ef6f18cc2082a860b2c5462c502883681a15fd244c678ae9fd094cca1e
SHA-256 (normalized text)
63b549acd695fc25c5db1cf9ab9c691998ed125045340c670f727f6c56e7bbeb

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Trust Center
Start your security review
View & download sensitive information
Ask for information
Overview
Welcome to Reco's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
Compliance
CSA STAR Level 1
GDPR
ISO/IEC 27001 SoA
ISO/IEC 27001:2022
SOC 2 Type 2
DPDPA
EU AI Act
ISO/IEC 42001:2023
ProcessUnity
Documents
REPORTSData Flow Diagram (DFD)
REPORTSNetwork Diagram
REPORTSPentest Report
COMPLIANCEDPDPA
COMPLIANCEEU AI Act
COMPLIANCEGDPR
COMPLIANCEISO/IEC 27001 SoA
COMPLIANCEISO/IEC 27001:2022
COMPLIANCESOC 2 Type 2
PRODUCT SECURITYProduct Architecture
PRODUCT SECURITYService-Level Agreement
DATA SECURITYAccess Monitoring
Product Security
Audit Logging
Integrations
Multi-Factor Authentication
View more
Reports
Data Flow Diagram (DFD)
Network Diagram
Pentest Report
View more
Data Security
Access Monitoring
Data Asset Classification
Data Backups
View more
App Security
Responsible Disclosure
Bot Detection
Code Analysis
View more
AI
AI Training Data and Bias
AI Security
AI Governance
Legal
Subprocessors
Customer Audit Rights
Cyber Insurance
View more
Infrastructure
Status Monitoring
Amazon Web Services
Anti-DDoS
View more
Risk Profile
Recovery Time Objective5 days
Recovery Point Objective24-48 hours
Critical DependenceNo
View more
Data Privacy
Data Breach Notifications
Data Privacy Officer
Employee Privacy Training
View more
ESG
Anti-Bribery and Corruption
Code of Ethics
Supplier Code of Conduct
Endpoint Security
Anti-Malware
Disk Encryption
DNS Filtering
View more
Corporate Security
Employee Handbook
Employee Training
HR Security
View more
Policies
Roles and Responsibilities
Acceptable Use Policy
Asset Authorization and Monitoring Policy
View more
Security Grades
SecurityScorecard
Reco.ai
BitSight
Reco.ai
Black Kite
Reco.ai
View more
Continuous Monitoring
Automated Alert Response
Automated Compliance Monitoring
Data Loss Prevention System (DLP)
View more
Training
Phishing Training
Secure Development Training
Security Awareness Training
View more
BC/DR
Data Backup/Backup Protection
Disaster Recovery Plan (DRP)
Business Continuity Plan (BCP)
Access Control
Mobile Device Access
Subprocessors
Knowledge Base (FAQ)
Is there an established formal, documented, and leadership-sponsored enterprise risk management (ERM) program that includes policies and procedures for identification, evaluation, ownership, treatment, and acceptance of cloud security and privacy risks?
Are cryptography, encryption, and key management policies and procedures established, documented, approved, communicated, applied, evaluated, and maintained?
Are remote geolocation capabilities enabled for all managed mobile endpoints?
Are processes, procedures and technical measures to destroy unneeded keys defined, implemented and evaluated to address key destruction outside secure environments, revocation of keys stored in hardware security modules (HSMs), and include applicable legal and regulatory requirement provisions?
Is cloud data periodically backed up?
View more
Trust Center Updates
New SOC 2 Bridge Letter for 2025 Available for Download
Compliance
A SOC 2 bridge letter for 2025 (December 1, 2024 – November 30, 2025) has been added to the Trust Center.