WorkOS SOC 2 status and provider evidence

y penetration testsExternal code auditsFrequently asked questionsWhere can I find your compliance resources?All compliance documentation can be found on our Trust Center.Is WorkOS GDPR compliant?Yes, WorkOS is GDPR compliant. Reach out to support@workos.com to request deletion of data.Can WorkOS sign a HIPAA BAA?Yes, WorkOS can sign business associate agreements for customers under enterprise plans.What data do you store?The data stored by

stakeholder gets cold feet or a competitor steps in. Rather than scramble when your customer asks, prepare for SOC compliance ahead of time. Further Reading:A developer's guide to GDPR complianceSecurity policy document examples for B2B SaaS appsHow to get SOC 2 compliance: A developer’s guideA developer’s guide to startup securityKey differences between CCPA and GDPR: How location affects enterprise complianceUnderstanding CSRF attacksThe

ocumentation can be found on our Trust Center.Is WorkOS GDPR compliant?Yes, WorkOS is GDPR compliant. Reach out to support@workos.com to request deletion of data.Can WorkOS sign a HIPAA BAA?Yes, WorkOS can sign business associate agreements for customers under enterprise plans.What data do you store?The data stored by WorkOS is limited to what is sent from the identity providers. For more information, view our Privacy Policy.Where can I find

.That said, if you process or host nonfinancial data, you should pursue SOC 2 (at some point). Note, too, that SOC 2 isn’t actually required by big-time compliance frameworks like HIPAA or PCI-DSS. The number of data breaches that occur, however, means that many companies, especially enterprises, will want to see SOC 2 compliance before inking a deal.Type 1 and Type 2 SOC 2 reports also make a difference here. Many startups, in a rush to app

d, if you process or host nonfinancial data, you should pursue SOC 2 (at some point). Note, too, that SOC 2 isn’t actually required by big-time compliance frameworks like HIPAA or PCI-DSS. The number of data breaches that occur, however, means that many companies, especially enterprises, will want to see SOC 2 compliance before inking a deal.Type 1 and Type 2 SOC 2 reports also make a difference here. Many startups, in a rush to appear complia

s. SOC 2 vs. SOC 3: Why your company needs compliance to growCompliance stands between your company and growth. If you want to sign enterprise deals, learn the differences between SOC 1, SOC 2, and SOC 3, and how best you can comply.Explore with AIOpen in ChatGPTOpen in ClaudeOpen in PerplexityCompliance stands between you and growth. SOC compliance likely wasn’t on your list of job responsibilities or in your vision for your career, but you

gAPI StatusResourcesChangelogBlogGuidesPodcastCompanyCareersSecuritySupport PlansCustomersPricingSign inSign upGuides/Security & ComplianceSearch Guides⌘ KIn this articleSOC 1 vs. SOC 2 vs. SOC 3: Why your company needs compliance to growCompliance stands between your company and growth. If you want to sign enterprise deals, learn the differences between SOC 1, SOC 2, and SOC 3, and how best you can comply.Explore with AIOpen in ChatGPTOpen

sSecuritySupport PlansCustomersPricingSign inSign upSecure, out of the boxWe check all the boxes so you can focus on what you do best, building your app and serving your customers.SOC 2 Type 2 certifiedGDPR & CCPA compliantAnnual 3rd-party security penetration testsExternal code auditsFrequently asked questionsWhere can I find your compliance resources?All compliance documentation can be found on our Trust Center.Is WorkOS GDPR compliant?Yes

sResourcesChangelogBlogGuidesPodcastCompanyCareersSecuritySupport PlansCustomersPricingSign inSign upGuides/Security & ComplianceSearch Guides⌘ KIn this articleSOC 1 vs. SOC 2 vs. SOC 3: Why your company needs compliance to growCompliance stands between your company and growth. If you want to sign enterprise deals, learn the differences between SOC 1, SOC 2, and SOC 3, and how best you can comply.Explore with AIOpen in ChatGPTOpen in ClaudeO