Snapshot 253576
Normalized text
Scripts and page chrome removed; this is what change detection compares.
RELISH is continuously monitoring its overall security posture. Announcements Relish Receives Clean SOC 1 Type 2, SOC 2 Type 2, GDRP and HIPAA Audit Reports Published on Jan 26, 2026 RELISH works with independent experts to verify its security, privacy, and compliance controls, and has achieved SOC 1 Type 2, SOC 2 Type 2, GDPR and HIPAA reports against stringent controls and standards. SOC 1 Type 2 and SOC 2 Type 2 Reports Relish works with an independent auditors to maintain SOC 1 Type 2 and SOC 2 Type 2 reports, which objectively certifies our controls to ensure the continuous security of our customers’ data. Developed by the Assurance Services Executive Committee (ASEC) of the AICPA, the Trust Services Criteria is the set of control criteria to be used when evaluating the suitability of the design and operating effectiveness of controls relevant to the security, availability, or processing integrity of information and systems, or the confidentiality or privacy of the information processed by the systems at an entity, a division, or an operating unit of an entity. GDPR and HIPAA Compliance Reports Relish utilizes enterprise-grade best practices to protect our customers’ sensitive personal and health information, and uses Drata to verify its security, privacy, GDPR and HIPAA compliance controls. Relish works with an independent auditors to maintain GDPR and HIPAA compliance reports, which objectively certifies our controls to ensure the continuous security and privacy of our EU and health industry customers’ data. Compliance RelishIQ, Inc. (Relish) is compliant with SOC 1 and SOC 2 Trust Service Criteria controls and requirements, and with GDPR and HIPAA regulations, controls and requirements. Relish's latest SOC 1 Type 2 and SOC 2 Type 2 reports, and GDPR and HIPAA Compliance reports are available. Security Complementary documentation related to Relish's Information Security and Data Privacy Programs. Policies Latest reviewed and updated policies that are part to Relish's Information Security and Data Privacy Programs. Continuous monitoring Note: If a control is passing all tests, it will be marked as green. If a control has a failed test that was not resolved within the past 14 days, it will be marked yellow. App Security Annual Penetration Tests Code Review Process Employee Disclosure Process Quarterly Vulnerability Scan Responsible Disclosure (Bug Bounty) Software Development Lifecycle Vulnerability Management Web Application Firewall Data Security Customer Data is Encrypted at Rest Daily Database Backups Security Policy SSL/TLS Enforced System Access Control Policy Infrastructure Security Cloud Data Storage Restricted Encryption of Web-Based Admin Access Multiple Availability Zones Password Policy Security Patches Automatically Applied Network Security Denial of Public SSH Firewalls Logging/Monitoring Malware Detection Software Installed Organization Security Acceptable Use Policy BCDR Plan Code of Conduct Disaster Recovery Plan Incident Response Plan Incident Response Team Product Security Databases Monitored and Alarmed Hard-Disk Encryption Maintains a Terms of Service NoSQL Databased Monitored & Alarmed Servers Monitored & Alarmed Session Lock Subprocessors IRS.gov Provides US Tax Identification Number (TIN) validation services for supplier's validations with Relish Data Assure integrations Data location: United States Open Sanctions Supplier's Sanction Lists validations and checks for supplier's validations with Relish Data Assure integrations. Data location: United States AnswerNet AnswerNet provides a specialized outbound support campaign on behalf of RelishIQ, Inc. (Relish) to execute third-party data validation. AnswerNet service is designed to mitigate ... Data location: United States Mastercard International Incorporated (Finicity) Bank Account Ownership and Verification Services for Relish Data Assure integration. Data location: United States Early Warning Services (EWS) Bank Account Ownership and Verification Services for Relish Data Assure integration. Data location: United States International Payments Identity (iPiD) Bank Account Ownership and Verification Services for Relish Data Assure integration. Data location: United States Topics and common questions 9 RELISH uses Drata’s automation platform to continuously monitor 100+ security controls across the organization. Automated alerts and evidence collection allow Relish to confidently prove its security and compliance posture any day of the year, while fostering a security-first mindset and culture of compliance across the organization. Data is encrypted both in-transit using TLS and at rest. Security is a company-wide endeavor. All employees complete an annual security training program and employ best practices when handling customer data. Relish utilizes enterprise-grade best practices to protect our customers’ sensitive health information, and uses Drata to verify its security, privacy, and HIPAA compliance controls. Relish works with an independent auditors to maintain a HIPAA compliance report, which objectively certifies our controls to ensure the continuous security and privacy of our health industry customers’ data. HIPAA is a federal law that requires the creation of national standards to protect sensitive patient health information from being disclosed without the patient’s consent or knowledge. RELISH works with industry leading security firms to perform annual network and application layer penetration tests. Additional details For additional details about RELISH Security and Data Privacy Programs, refer to the following URLs. Security Program: https://relishiq.com/about-us/security/ Terms of Use: https://relishiq.com/terms-of-use/ Privacy Statement (US): https://relishiq.com/privacy-statement-us/ Cookie Policy: https://relishiq.com/opt-out-preferences/ Relish Apps Status: https://status.apps.relishiq.com/ Privacy details RELISH PRIVACY POLICY Revision 5 – August 8, 2025. Please read this Privacy Policy carefully. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal information. By accessing our website, applications, or any services provided by Relish, you consent to this Privacy Policy. If you do not agree, please refrain from using our Platform. For inquiries about this policy or to exercise your rights, contact us at info@relishiq.com. Privacy URL