What SOC 2 provider does SurveyMonkey use?

Vanta

Vanta is named in SurveyMonkey's security or compliance materials.

esource CenterBlogTrust CenterFree ToolsLearning LabNewSUPPORTHelp CenterNew study: The cost of losing curiosityThese 3 behaviors will either crush or cultivate your competitive advantage.Read reportEnglish (US)English (UK)DeutschFrançaisNederlandsDanskEspañolSuomiItaliano日本語한국어NorskPortuguêsРусскийSvenskaTürkçe中文(繁體)Contact SalesLog inSign up freeProductsSurveyMonkeyLaunchPadNewApplyOTHER PRODUCTSGetFeedbackNewWufooSURVEYMONKEY FEATURESNew

d Contractual Clauses (SCCs) by default✔ Data Privacy Framework (DPF) self-certified✔ Robust privacy impact assessment processes✔ SOC 2 Type II✔ ISO-27001✔ CCPA✔ HIPAA**✔ PCI DSS✔ GDPR (EU, UK, Switzerland) **BAAs available as add-on with the Enterprise plan; must be purchased separately✔ Single Sign-On (SSO)*✔ Two-factor authentication (2FA)✔ Account control*✔ Data deletion on a self-service basis or upon request*Available to SurveyMonkey

overnance✔ Standard Contractual Clauses (SCCs) by default✔ Data Privacy Framework (DPF) self-certified✔ Robust privacy impact assessment processes✔ SOC 2 Type II✔ ISO-27001✔ CCPA✔ HIPAA**✔ PCI DSS✔ GDPR (EU, UK, Switzerland) **BAAs available as add-on with the Enterprise plan; must be purchased separately✔ Single Sign-On (SSO)*✔ Two-factor authentication (2FA)✔ Account control*✔ Data deletion on a self-service basis or upon request*Available

y defaults, intuitive controls, and the flexibility to manage your data on your terms.CERTIFICATIONS & STANDARDSSimplify how you stay compliantWith certifications like SOC 2, PCI, ISO 27001, and bi-annual privacy audits, SurveyMonkey doesn’t just claim security—we have independent third parties verify and validate it. Our commitment to compliance is validated by rigorous external assessments and industry-recognized standards, so you can trust yo

✔ Standard Contractual Clauses (SCCs) by default✔ Data Privacy Framework (DPF) self-certified✔ Robust privacy impact assessment processes✔ SOC 2 Type II✔ ISO-27001✔ CCPA✔ HIPAA**✔ PCI DSS✔ GDPR (EU, UK, Switzerland) **BAAs available as add-on with the Enterprise plan; must be purchased separately✔ Single Sign-On (SSO)*✔ Two-factor authentication (2FA)✔ Account control*✔ Data deletion on a self-service basis or upon request*Available to SurveyM

✔ Customer control of data✔ AI governance✔ Standard Contractual Clauses (SCCs) by default✔ Data Privacy Framework (DPF) self-certified✔ Robust privacy impact assessment processes✔ SOC 2 Type II✔ ISO-27001✔ CCPA✔ HIPAA**✔ PCI DSS✔ GDPR (EU, UK, Switzerland) **BAAs available as add-on with the Enterprise plan; must be purchased separately✔ Single Sign-On (SSO)*✔ Two-factor authentication (2FA)✔ Account control*✔ Data deletion on a self-service