WeaveTrust Center

Overview

At Weave, we are deeply committed to safeguarding the data that powers your engineering team's performance, maintaining rigorous industry standards including SOC 2 Type II compliance. We invite you to review our comprehensive security documentation to understand the strict measures and protocols we employ to protect your workflow analytics and ensure your continued trust.

Compliance

Compliance frameworks Weave currently meets or is working toward to uphold their security and privacy commitments.

SOC 2
SOC 2
Compliant
ISO 27001
ISO 27001
Compliant

Resource library

Our security, compliance, and policy documentation, including audit reports.

Weave SOC 2 Type IIFebruary 26, 2026
Weave SOC 2 Type IFebruary 26, 2026
Weave COI - CybersecurityFebruary 26, 2026
Weave ISO 27001 Audit ReportMarch 16, 2026
WorkWeave, Inc. - ISO/IEC 27001 2022 Official CertificateMarch 31, 2026
Weave - Vulnerability Assessment and Penetration Testing (VAPT)February 26, 2026
Code of Conduct / Acceptable Use PolicyApril 30, 2026
Information Security PolicyApril 30, 2026
Asset Management PolicyApril 30, 2026
Data Management PolicyApril 30, 2026
Logical Access PolicyApril 30, 2026
Vulnerability Management PolicyApril 30, 2026
Incident Response Plan and PolicyApril 30, 2026
Software Development and Lifecycle Management PolicyApril 30, 2026
Vendor Risk Management PolicyApril 30, 2026
Business Continuity and Disaster Recovery PolicyApril 30, 2026
Information Security Roles and Responsibilities PolicyApril 30, 2026
Risk Management PolicyApril 30, 2026
Human Resource Security PolicyApril 30, 2026
Privacy PolicyApril 30, 2026

Controls

Our security program is built on a complete set of controls that govern how we safeguard data and manage risk.

Infrastructure security
  • Architecture Diagram
  • Platform Availability Monitoring
  • Platform Availability Alerts
Organizational security
  • Trust Page
  • Compliance Monitoring
  • Asset Inventory
Product security
  • Code Changes Planning
  • Code Changes Tested
  • Code Changes Approved
Internal security procedures
  • Sign-up Consent
  • Data Management Policy
  • Onboarding Checklist
Data and privacy
  • Confidential Data Deletion
  • PII Inventory
  • Public Privacy Policy

Subprocessors

Trusted third parties that support our services and may process customer data as part of their function.

GCP
United States
Github
United States
PostHog
United States
Pylon
United States
Resend
United States

Frequently asked questions

Powered by