profile_image
Trust Center Overview
​
Protecting your data is paramountFrom infrastructure to people, Responsive has woven security into every part of our DNA, so you can rest assured that your content and data are locked down and secure. Just ask the companies that trust us with their information — including Microsoft, SAP, Zoom and Adobe.Trusted by
SOC 2
ISO 27001
GDPR
DORA
Standards you can feel good about.With information security breaches all too common, teams must take measures to reduce risk. Responsive maintains industry best practices and adheres to global standards to help our customers meet their own compliance standards and security requirements.Documents
content-icon-alt
Responsive-POL-012-Antivirus_and_Antimalware_Policy.pdf

Last Updated2026-01-21

content-icon-alt
Responsive-PLN-001-IT_Business_Continuity___Disaster_Recovery_Plan.pdf

Last Updated2026-01-21

content-icon-alt
Responsive-Incident_Response_Plan.pdf

Last Updated2026-01-21

content-icon-alt
SIG Questionnaire

Last Updated2026-02-17

content-icon-alt
SIG Lite

Last Updated2026-02-17

content-icon-alt
CAIQv4.0.2.xlsx

Last Updated2026-01-21

View more

Security by design
Secure development
System Architecture
Network security
Independent validation
Continuous Monitoring
Cloud Security
Hosting
Layers of security
Reliability
Business Continuity
Access Management
Compliance
ISO 27001:2022
ISO 27701
SOC 2 Type II
GDPR
CCPA
Privacy
Privacy policy
Consent
Retention
Access
Transfer
Subprocessors

Filter by:

processor
usage
location
processor-logo
Abnormal Security
Purpose: Email security threat detection and response
Data Types Processed: Email metadata, headers, content (for scanning only) Access Controls: Access restricted to necessary personnel under strict RBAC; encrypted at rest and in transit Compliance: SOC 2 Type II, ISO 27001, GDPR-compliant
United States
processor-logo
Proofpoint
Purpose: Email threat protection and data loss prevention (DLP) Data Processing Location: United States Data Types Processed: Email metadata, headers, attachments, and content (for threat analysis and filtering) Access Controls: Strict role-based access controls (RBAC); data encrypted in transit and at rest Compliance: SOC 2 Type II, ISO 27001, GDPR-compliant
United States
Frequently Asked Questions
Responsive is both compliant with SOC 2 Type II standards and is ISO 27001 certified.

Responsive is SOC 2 Type II compliant. We maintain continuous compliance with SOC 2 Type II framework, with regular audits conducted by AICPA approved audit-firm. We can share the SOC 2 Type II report with a signed non-disclosure agreement per AICPA requirements.
No

We do not store personally identifiable information (PII) in an on-premises location. Our data, including PII, is stored in cloud environments.
Yes

Yes, we have a documented third-party risk management program in place for the selection, oversight, and risk assessment of subcontractors. This program includes vendor reputational review, defined risk assessment and classification methods for vendors, and requires confidentiality agreements or NDAs.

View more

Latest Updates

Latest Security Updates

2026-01-21
See the latest FAQ above, including an updated backup policy

Updated Policy Documents

2026-01-21
Policy documents have been updated to show the latest standards and practices.

New Update to this 
Questions? Get in touchWhether you're conducting vendor assessments, need clarification on our policies, or want to discuss custom security requirements, please don't hesitate to reach out. Questions? Contact Us
Powered By Responsive