DataDome Completes SOC 2 Report

DataDome’s mission is to protect our customer websites, APIs, and mobile applications against bots and threats. We consider the security of customer data to be very important.

Because the cloud industry is all about trust and DataDome is a cybersecurity company, we are globally engaged in a process to manage our customer data in the most secure and efficient way.

Today, we’re pleased to announce that we’ve successfully completed our Service Organization Control (SOC) 2 Type I audit.

What SOC 2 Compliance Means

DataDome is committed to trust and security, and to consolidating our words with actions. Our SOC 2 Type 1 final report demonstrates how our security controls align with AICPA’s  SOC 2 standard.

To validate our alignment with SOC 2, we underwent a third-party audit with Coalfire to evaluate DataDome’s infrastructure, software, processes, and policies for managing customer data based on three “trust service principles”:

• Security
• Availability
• Confidentiality

‍The successful completion of the SOC 2 Type I audit is one of the many steps we are taking in our continuous effort to ensure a safe, secure environment for customer data. To that end, we are working on SOC 2 Type II reporting going forward.

How DataDome Protects Your Data

DataDome’s data protection and security policies are compliant with current regulations for processing personal data: datadome.co/compliance-data-privacy

In the SOC 2 report, for example, you will read how customer data is protected thanks to DataDome’s:

• Security policies and risk management process.
• Encryption protocols for data at rest and in transit.
• Logical and physical access controls.
• Change management and SDLC process.
• Vulnerability management process.
• Data backup and disaster recovery strategies.
• System monitoring and security incident response management.

To request a copy of the SOC 2 report, a signed NDA will be required. Please contact us.