SOC 2
Independent assurance
Type II independently audited controls for security, availability, and confidentiality.
SuperAnnotate Trust Center
Transparency you can build on
Review the standards, controls, and third parties behind our commitment to the confidentiality, integrity, and availability of your data.
Controls continuously monitored
Verified through Secureframe
ISO 27001:2022
Certification
Certified information security management system.
GDPR
Privacy program
Privacy program designed to support applicable GDPR requirements to protect personal data and privacy for people in the European Union.
CCPA
Privacy program
Privacy controls designed to address applicable California privacy requirements.
Security & privacy
Controls aligned with recognized standards and privacy frameworks
Our security and privacy program is designed and operated in alignment with recognized security standards and applicable privacy requirements.
Independent assurance
SOC 2
Type II independently audited controls for security, availability, and confidentiality.
Certification
ISO 27001:2022
Certified information security management system.
Privacy program
GDPR
Privacy program designed to support applicable GDPR requirements to protect personal data and privacy for people in the European Union.
Privacy program
CCPA
Privacy controls designed to address applicable California privacy requirements.
Subprocessors
View current subprocessor list
The services that support our platform
Our Trust Center maintains the current list of third-party services involved in delivering and supporting SuperAnnotate.
- AWS Cloud infrastructure
- Atlassian Development and operations
- Google Workspace Business communication
- Slack Internal communication
- HubSpot Customer relationship management
- Mixpanel Product analytics
- Hotjar User experience analytics
- Zendesk Customer support
Continuous monitoring
A living security program
Our controls are continuously monitored through Secureframe across the areas that matter most to customers.
Change management
- Production data use is restricted
- Secure development policy
- Segregation of environments
Availability
- Backup restoration testing
- Uptime and availability monitoring
- Business continuity planning
Access security
- Access to product is restricted
- Encryption and key management
- Removal of access
Vulnerability management
- Vulnerability and patch management
- Third-party penetration testing
Network security
- Endpoint security
- Automated security alerts
- Network security policy
Risk and response
- Vendor risk management
- Formal risk assessments
- Incident response plan
Assurance resources
Documents for your review
Access public certifications and request restricted assurance documents through our verified Trust Center.
ISO/IEC 27001:2022
Our information security management system certification against the globally recognized ISO 27001 standard.
View resourceSOC 2 Type II
An independent assessment of controls related to security, availability, and confidentiality over time.
Request reportPenetration Test Report
A report from regular third-party testing of our systems and controls, available through a controlled request.
Request reportHave a security question?
Our team can help with due diligence, document requests, and questions about how SuperAnnotate protects your data.