SOC 2 company profile

What SOC 2 provider does Retool use?

See the auditors, compliance platforms, and trust-center services connected to Retool’s SOC 2 program.

SOC 2 statusself attested
Report typeType II
Providers found3
Last checked2026-08-29
Providers

Retool’s SOC 2 stack

auditor

A-LIGN

A-LIGN appears in Retool's public security materials.

C 2 Type 2\" (also referred to as \"SOC2 Type II\"). A Trust Center update states: “Our latest SOC2 report is available now here in the trust center”. - **Auditor or CPA Firm:** \"A-LIGN\" (listed as \"AuditorA-LIGN\" for both SOC 2 Type 2 and ISO/IEC 27001:2022). - **Compliance Automation Platform & Trust-Center Provider:** \"SafeBase\" (footer: \"Retool Trust Center | Powered by SafeBase\"). The platform is identified as \"SafeBase by Drata

Checked 2026-08-29
View source ↗
trust center

SafeBase

SafeBase appears in Retool's public security materials.

. - **Auditor or CPA Firm:** \"A-LIGN\" (listed as \"AuditorA-LIGN\" for both SOC 2 Type 2 and ISO/IEC 27001:2022). - **Compliance Automation Platform & Trust-Center Provider:** \"SafeBase\" (footer: \"Retool Trust Center | Powered by SafeBase\"). The platform is identified as \"SafeBase by Drata\". - **Frameworks:** - \"SOC 2 Type 2\" - \"ISO/IEC 27001:2022\" - \"GDPR\" (\"We adhere to GDPR requirements.\") - \"CCPA\" - **Dates:** - \"Septembe

Checked 2026-08-29
View source ↗
compliance platform

Drata

Drata appears in Retool's public security materials.

2). - **Compliance Automation Platform & Trust-Center Provider:** \"SafeBase\" (footer: \"Retool Trust Center | Powered by SafeBase\"). The platform is identified as \"SafeBase by Drata\". - **Frameworks:** - \"SOC 2 Type 2\" - \"ISO/IEC 27001:2022\" - \"GDPR\" (\"We adhere to GDPR requirements.\") - \"CCPA\" - **Dates:** - \"September 10, 2025\" (Date of Trust Center update for the latest SOC2 Type II report). - \"May 15, 2025\" (Related to

Checked 2026-08-29
View source ↗
Compliance coverage

Frameworks named by Retool

GDPR

e\" (footer: \"Retool Trust Center | Powered by SafeBase\"). The platform is identified as \"SafeBase by Drata\". - **Frameworks:** - \"SOC 2 Type 2\" - \"ISO/IEC 27001:2022\" - \"GDPR\" (\"We adhere to GDPR requirements.\") - \"CCPA\" - **Dates:** - \"September 10, 2025\" (Date of Trust Center update for the latest SOC2 Type II report). - \"May 15, 2025\" (Related to vulnerability updates). - **Named Provider Relationships:** - \"SafeBase

Checked 2026-08-29
View source ↗
SOC 2

Retool's security and compliance details based on the Trust Center (https://trust.retool.com) and official documentation: - **SOC 2 Status & Report Type:** \"SOC 2 Type 2\" (also referred to as \"SOC2 Type II\"). A Trust Center update states: “Our latest SOC2 report is available now here in the trust center”. - **Auditor or CPA Firm:** \"A-LIGN\" (listed as \"AuditorA-LIGN\" for both SOC

Checked 2026-08-29
View source ↗

Primary compliance evidence

Retool public statement

Retool's security and compliance details based on the Trust Center (https://trust.retool.com) and official documentation: - **SOC 2 Status & Report Type:** \"SOC 2 Type 2\" (also referred to as \"SOC2 Type II\"). A Trust Center update states: “Our latest SOC2 report is available now here in the trust center”. - **Auditor or CPA Firm:** \"A-LIGN\" (listed as \"AuditorA-LIGN\" for both SOC

Classification: self attested · checked 2026-08-29
Open source ↗
SOC 1SOC 2SOC 3Type IType IIAudit readinessTrust centersVendor riskSecurity evidenceProcurement