Snapshot 222664
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview Red Cup IT has implemented best-in-class security practices to keep customer data safe. Our mission is to build the world's most secure and advanced MSP platform, where security by design is the default way that we operate. We're laser-focused on how to leverage security as an enabler of a better user experience for our customers. Privacy and data security best practices are embedded in our policies, training, and daily operations. Compliance SOC 2 Type 2 ISO/IEC 27001 ISO/IEC 27001 SoA CSA STAR Level 1 NIST CSF ISO/IEC 42001:2023 SOC 2 Type 1 CCPA PCI DSS CMMC Certified NIST 800-53 Rev. 5 Red Cup IT is reviewed and trusted by Chainalysis Chosen Foods FlexPoint Gradient MSP Hebbia Humble Juice Co. ItsWare Insight Assurance Liongard Maiden Century MaryRuth Organics Metallicus Nicotine River PDW AI Senteon Slingshot Aerospace ZeroTek Documents REPORTSOther Reports REPORTSSOC 2 Report COMPLIANCEISO/IEC 27001 COMPLIANCEISO/IEC 27001 SoA COMPLIANCEISO/IEC 42001:2023 COMPLIANCESOC 2 Type 2 Risk Profile Data Access Level Impact Level Recovery Time Objective View more Reports Network Diagram Other Reports PCI DSS View more Self-Assessments CAIQ Lite SIG Lite Data Security Access Monitoring Data Backups Data Erasure View more App Security Responsible Disclosure Bot Detection Code Analysis View more AI AI Monitoring AI Risk Management AI Governance View more Legal Subprocessors Master Services Agreement Privacy Policy View more Data Privacy Cookies Data Breach Notifications Data Privacy Officer View more Access Control Data Access Logging Password Security View more Infrastructure Amazon Web Services Anti-DDoS Azure View more Endpoint Security Disk Encryption DNS Filtering Endpoint Detection & Response View more Network Security Data Loss Prevention DNSSEC Firewall View more Corporate Security Asset Management Practices Email Protection Employee Training View more Policies Acceptable Use Policy Access Control Policy Anti-Malicious Software Policy View more Security Grades SecurityScorecard Website CryptCheck redcupit.com HSTS Preload List redcupit.com View more Trust Center Updates Pioneering AI Security: Red Cup IT Achieves ISO 42001 Certification Compliance We are proud to announce that Red Cup IT has officially achieved ISO/IEC 42001:2023 certification, the global standard for Artificial Intelligence Management Systems (AIMS). This milestone positions Red Cup IT as one of the very first MSP/MSSPs globally to validate our AI operations against this rigorous international standard. While many in our industry are beginning to explore AI, we have moved fast to secure it. Why this matters: This certification complements our existing security frameworks (such as ISO 27001 / SOC 2) by specifically addressing the unique attack surfaces, ethical governance, and data integrity challenges posed by Artificial Intelligence. It validates that we have implemented a comprehensive system to manage AI risks, ensuring that our innovation never comes at the cost of security. What this means for our stakeholders: A Partner Ahead of the Curve: You are partnering with an MSP/MSSP that doesn't just use modern technology, but adheres to the strictest standards governing it. Verified Controls: Our AI workflows, vendor selection, and internal tools are subject to continuous risk assessment and independent audit. Future-Proof Compliance: As regulations around AI tighten globally, Red Cup IT is already aligned with the premier benchmark for responsible AI usage. Accessing the Artifacts: The official ISO 42001 certificate and our updated compliance details are now available for review. Please navigate to the Documents section of this Trust Center to view or download these artifacts. Supply Chain Data Theft via Salesforce, Salesloft, and Drift (August 2025) Vulnerabilities We are aware of a recent supply chain attack campaign in which a malicious actor leveraged compromised OAuth tokens from the Salesloft Drift integration to access Salesforce customer data and, in a limited number of cases, Google Workspace email accounts. Between August 8 and August 18, 2025, attackers gained unauthorized access using stolen OAuth tokens from the Drift AI integration linked to Salesloft and Salesforce. Google confirmed that, on August 9, attackers accessed email from a very small number of Google Workspace accounts that had been specifically integrated with Drift Email. Only organizations that specifically integrated their Google Workspace or Salesforce environments with Drift (via Salesloft) are at risk. There is no indication that unrelated Google Workspace or Salesforce accounts (not using Drift/Drift Email) were impacted. Immediate Action Items Revoke all OAuth tokens and credentials associated with Drift or Salesloft integrations immediately. Rotate all secrets, API keys, and reset any credentials exposed to Drift. Review all third-party integrations connected to Drift or Salesloft. Investigate any signs of unauthorized access or suspicious activity since August 8, 2025. Monitor your users and domains for unusual login attempts, especially those with Drift integrations. What we did; We have completed all recommended vendor and platform response actions following the recent supply chain data theft campaign targeting Salesforce instances via the Salesloft Drift integration. All OAuth tokens and credentials associated with Drift or Salesloft integrations have been revoked and reset. Vulnerable integrations have been disconnected and reviewed for suspicious activity. Ongoing monitoring is in place, and no further activity by the actor has been detected. No core systems or unrelated data were affected. If new information becomes available, we will provide timely updates. If you have specific concerns about your Salesforce integration or need additional support, please get in touch with our security team. Red Cup IT Not Impacted by MOVEit Vulnerabilities Vulnerabilities Recently, the security team here at Red Cup IT became aware of the news surrounding a high-impact MOVEit vulnerability. Reputable threat intelligence sources have reported that this incident impacts customers of this solution: https://www.securityweek.com/moveit-customers-urged-to-patch-third-critical-vulnerability/. We want our customers to know that this vulnerability does not impact Red Cup IT. We do not leverage this technology/software within our product, and therefore the confidentiality, integrity, and availability of our systems remain unharmed. Thanks, and please reach out with any questions. Team Red Cup IT Confirmation of no impact from CircleCI's January 2023 security incident General Red Cup IT does not use CircleCI for continuous integration and continuous delivery. Microsoft Exchange General Red Cup IT does not use Microsoft Exchange Server (Cloud or On-Premise) If you need help using this Trust Center, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue