Our security program
Security is core to everything we do at Deck. We maintain compliance with SOC 2 Type II, HIPAA, GDPR, and PIPEDA through continuous monitoring, independent audits, and enterprise-grade controls. Browse our policies and reports below.
Compliance
Compliance frameworks Your organization currently meets or is working toward to uphold our security and privacy commitments.

SOC 2
Compliant

HIPAA
Compliant

GDPR
Compliant

PCI DSS
In progress

PIPEDA
Compliant
Resource library
Our security, compliance, and policy documentation, including audit reports.
Deck SOC 2 Type II
Deck Penetration Testing Report
Business Continuity Plan
Deck Disaster Recovery Plan
Subprocessors
Trusted third parties that support our services and may process customer data as part of their function.
C
CloudflareNo location specified
G
GCPNo location specified
MA
Microsoft AzureNo location specified
P
PylonNo location specified
A
AikidoNo location specified