Officially SOC 2 Type 2 certified
We are pleased to announce that Felt has successfully achieved SOC2 Type 2 certification after a rigorous audit and observation period. The security and privacy of our users’ data has always been our guiding principle and we are excited to share that our dedication has been recognized with this certification.
Data privacy and security is paramount at Felt, and we’ve been committed to SOC 2 from the start. After receiving our SOC 2 Type 1 certification last October, a “point-in-time assessment,” our auditors observed our work for more than 9 months to make sure we had done what we had promised to do. We were able to demonstrate that we are not just marking things as done on a checklist, but instead have fully internalized the security mindset in its day to day processes.
Fully GDPR Compliant
Building on our commitment to global data protection standards, we're thrilled to announce that Felt is now fully GDPR compliant. This milestone demonstrates our dedication to protecting the privacy rights of individuals across the European Economic Area and beyond. We've implemented comprehensive measures to ensure our platform adheres to all GDPR requirements, including:
- Enhanced data processing agreements
- Robust data subject access request procedures
- Transparent data collection practices that put users in control of their information
Our GDPR compliance framework complements our existing security infrastructure, providing our European users and global organizations with the confidence that their data is handled with the utmost care and respect for privacy regulations. We've updated our privacy policies and internal processes to ensure lawful data processing, implemented strict data retention policies, and established clear protocols for data breach notification. These enhancements not only satisfy regulatory requirements but reflect our fundamental belief that strong privacy protections should be woven into the fabric of our service.
Committed to going above and beyond to protect your data
Felt has always gone above and beyond the requirements and checklists when it comes to keeping our users’ data safe and secure. We’ve built our technology stack on Amazon Web Services and Render, inheriting the safety protocols relied on by world’s leading organizations and even government agencies. We’ve made sure all our employees use dedicated and monitored devices, and could access our systems only via multi-factor authentication from Day 1.
Support for regional hosting & VPC
We also know that safety and security is not a destination, and we continue to invest here. As Felt’s customer base rapidly expands to include international organizations and Fortune 500 companies, our requirements have evolved to meet their needs. Last month, we announced support of regional hosting, making it possible for organizations to choose exactly where their data will be stored. Our users can now choose from five different AWS locations, including:
- United States
- Australia
- United Kingdom
- Europe (Frankfurt, Germany)
- Canada
In the same launch, we also announced even more granular administrative controls, giving IT leaders the ability to set stricter defaults and better audit data access.
And we aren’t stopping there either. Our team is hard at work at building our next Virtual Private Cloud (VPC) implementation, which will allow our customers to run the ground-breaking Felt GIS software within the confines of their own AWS clouds.
Tying it all together; we know that our customers’ demand for more security and safety will never end. And we welcome the challenge!
Request a copy of the SOC 2 Type 2 report
We are excited to share our SOC2 Type 2 report with our current and prospective customers; all you have to do is reach out to our experts. If you’re considering bringing Felt to your team or organization, you can book a demo with our dedicated sales team who can answer any questions you might have about security or any other aspect of our product.