LoginSchedule demoLoginSchedule demoOur security program is independently audited to the SOC 2 Type II standard. For GDPR and CCPA, we support our customers' compliance through a Data Processing Agreement, Standard Contractual Clauses, and published policies.
The EveryoneSocial Platform is audited annually against the AICPA Trust Services Criteria for Security, Availability, and Confidentiality. Our most recent report covers the period May 1, 2024 through April 30, 2025. The full report is available to prospects and customers under NDA through our Trust Center.
As a data processor, EveryoneSocial supports our customers' GDPR compliance. We offer a Data Processing Agreement and EU Standard Contractual Clauses to support lawful international data transfers.
EveryoneSocial acts as a service provider under the CCPA and supports our customers in meeting their obligations for the personal information of California residents.
Independent penetration tests of the EveryoneSocial Platform are performed at least annually. A summary letter is available to prospects and customers under NDA through our Trust Center.
Encryption, access controls, and a SOC 2–audited hosting provider work together to keep customer data secure at every layer.
Customer data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256.
Access to production systems and customer data is restricted to authorized personnel based on role and business need. Access is enforced through SSO, multi-factor authentication, and least-privilege principles, and is logged and reviewed.
The EveryoneSocial Platform is hosted on Amazon Web Services. AWS is a SOC 2–audited subservice organization.
The EveryoneSocial Platform gives administrators the controls they need to align with their identity, access, and compliance programs.
SAML 2.0 — centralized authentication through your identity provider.
Automated user provisioning and de-provisioning from your identity provider.
RBAC aligns permissions with user roles to enforce least privilege.
Available with the EveryoneSocial Compliance module: fully configurable to support LinkedIn capture, surveillance, and archive, with WORM record storage and retention designed to meet SEC Rule 17a-4 and support FINRA books-and-records obligations. Native API integration with Global Relay and SFTP delivery to Bloomberg Vault, through a pluggable archive layer built to onboard additional vendors. Tell us your archive of record and we will scope it. Contact Sales for the full set of Governance & Risk features.
The EveryoneSocial Platform is monitored continuously for security and availability events.
We maintain a documented incident response plan with defined roles, escalation paths, and customer notification procedures, tested at least annually.
All employees complete security and privacy training on hire and annually thereafter.
Background checks are performed where permitted by law.
Security policies are reviewed at least annually and acknowledged by personnel.
We build privacy and data protection into our platform and processes. We publish a Privacy Policy, offer a Data Processing Agreement aligned to GDPR, and support Standard Contractual Clauses for international data transfers. A current list of sub-processors is available in our Trust Center.
To report a suspected vulnerability or security issue, please contact security@everyonesocial.com.
Visit the EveryoneSocial Trust Center for our SOC 2 report, sub-processor list, Data Processing Agreement, Standard Contractual Clauses, and penetration test summary.
