# Dropzone AI

Dropzone AI is the first AI SOC analyst that autonomously investigates alerts 24/7. It integrates with existing tools, adapts to your environment, and generates decision-ready reports. You can focus on real threats and 10X your team without adding headcount. No playbooks, code, or prompts required.

## Compliance

SOC 2 Type 2

## Resources

### Security and Compliance

- [Security Privacy and Trust Overview](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=68389148e9029a28db45c196)
- [Security and Compliance Posture](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=683890f3fd99d5e33989038f)
- [SOC 2 Bridge Letter - 2026](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=6a075c82199946b972c23fd5)
- [SOC 2 Type 2 Report - 2026](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=6a4d7ac2307ddeb95a95f2d0)

### Penetration Test

- [Penetration Test Results - 2024](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=683890827734790f0f1f773f)
- [Penetration Test - SSO - 2024](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=683890a4a22dbeb577a742d7)
- [Penetration Test - 2025](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=6995dac2c7f81858dc7ef09c)
- [Penetration Re-test - 2025](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=6995db0625d7c626d237b8b5)

### Insurance

- [Insurance Details - 2025](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=683890d0fd99d5e339890241)
- [Insurance Details - 2026](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=6995dbc0dff0b8d32724aafd)

### Dropzone AI Policies

- [Access Control Policy](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=69a99c39ba379394fe212749)
- [Asset Management Policy](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=69a99c39ba379394fe212757)
- [Business Continuity and Disaster Recovery Plan](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=69a99c39ba379394fe212764)
- [Code of Conduct](https://trustcenter.dropzone.ai/?requestAccessOpen=true&requestedResources=69a99c39ba379394fe212771)

### Other resources

Dropzone-Data-Processing-Addendum-DPA-Published.pdf

## Controls

Updated 5 minutes ago

### Infrastructure security

- Unique production database authentication enforced
- Encryption key access restricted
- Unique account authentication enforced

### Organizational security

- Asset disposal procedures utilized
- Production inventory maintained
- Anti-malware technology utilized

### Product security

- Data encryption utilized
- Control self-assessments conducted
- Data transmission encrypted

### Internal security procedures

- Continuity and Disaster Recovery plans tested
- Cybersecurity insurance maintained
- Configuration management system established

### Data and privacy

- Data retention procedures established
- Customer data deleted upon leaving
- Data classification policy established

## Subprocessors

Amazon Web Services • Cloud provider

GitLab • Version control

Google Workspace • Productivity

HubSpot • Marketing

Vanta connects to a company's core systems to continuously monitor these controls.