Skip to main content

Security and privacy

You trust Vendasta with sensitive business data and rely on Vendasta to be a responsible custodian of your clients' data as well. Vendasta protects that data with independently audited controls, and its security posture is maintained to meet the standards expected across the industries you serve.

This page explains Vendasta's approach at a high level and points you to where the underlying documentation lives. The Vendasta Trust Center is the source of record for everything below.

Vendasta Trust Center

For security documentation, privacy policies, and reporting, visit the Vendasta Trust Center. Send any security question from you or your clients there first, or email security@vendasta.com.

SOC 2® reporting​

Vendasta maintains a current System and Organization Controls (SOC 2®) Type 2 report, issued by an independent auditor.

A SOC 2 Type 2 report examines the design and operating effectiveness of an organization's controls over a defined period, measured against the Trust Services Criteria (security, availability, processing integrity, confidentiality, and privacy). It gives your own auditors and security teams the detail they need for vendor risk management.

The report itself is confidential and its use is restricted. Vendasta shares it with you and others who need it for due diligence, typically under a non-disclosure agreement. Because the report is gated, this page does not reproduce its contents.

Request the SOC 2® report and security documentation​

When you or your client's security team needs to complete a vendor review, request access through the Vendasta Trust Center:

  • SOC 2 report – Available on request; access to gated documents may require a non-disclosure agreement
  • Security control summary – The current, published summary of Vendasta's controls
  • Subprocessors – The current list of third-party subprocessors Vendasta uses

For anything the Trust Center does not answer, contact security@vendasta.com.

Privacy and data protection​

Vendasta's privacy practices govern how data is collected, processed, and protected across the platform. The following are available through the Trust Center:

  • Customer Privacy Policy – How Vendasta handles personal data
  • Cookie Policy – How cookies and similar technologies are used
  • California Privacy Rights – Disclosures for California residents
  • GDPR – The data subject policy and procedure, and the personal data breach incident response procedure

Several Partner Center settings connect to how access and data are secured in your own account: