Our security program
Security is core to everything we do at Deck. We maintain compliance with SOC 2 Type II, HIPAA, GDPR, and PIPEDA through continuous monitoring, independent audits, and enterprise-grade controls. Browse our policies and reports below.
Compliance
Compliance frameworks currently meets or is working toward to uphold their security and privacy commitments.
SOC 2
Compliant
HIPAA
Compliant
GDPR
Compliant
PCI DSS
Compliant
PIPEDA
Compliant
Resource library
Our security, compliance, and policy documentation, including audit reports.
SOC 2 Type II Report - 2025February 27, 2026
PCI DSS - Letter of EngagementApril 16, 2026
Vulnerability Assessment and Penetration Testing (VAPT) ReportJune 15, 2026
Business Continuity and Disaster Recovery PolicyJune 12, 2026
Information Security PolicyJune 12, 2026
Incident Response Plan and PolicyJune 12, 2026
Information Security Roles and Responsibilities PolicyJune 17, 2026
Code of ConductJune 17, 2026
Access Management PolicyJune 17, 2026
Enterprise Risk Management PolicyJune 17, 2026
Software Development PolicyJune 17, 2026
Vendor Risk Management PolicyJune 17, 2026
PCI DSS Control StandardJune 17, 2026
Artificial Intelligence Management PolicyJune 17, 2026
Acceptable Use PolicyJune 17, 2026
Subprocessors
Trusted third parties that support our services and may process customer data as part of their function.
Cloudflare
United States
Pylon
United States
Aikido
United States
Google Workspace
United States
Basis Theory
United States