Security at Uproot-Staging
UprootSecurity is a compliance automation and offensive security platform founded in 2023. It offers continuous risk visibility by aggregating real security signals—such as pentest findings, code scanning alerts, cloud misconfigurations, and vendor risks—into a live risk register. It also streamlines evidence collection and remediation guidance, helping teams stay audit-ready while managing vendor questionnaires, compliance controls and risk across cloud, code, mobile, infrastructure, and web applications.
- Controls
- 20
- Policies
- 1
- Subprocessors
- 1
Uproot-Staging's security program
Run on UprootSecurity
What's covered
Access Control
Availability
Change Management
Communication
Compliance
SOC 2
Customer data security controls
Controls
20 controls across 4 areas
Access Control
5 controls
Allow-by-Exception Rule for Authorized Applications
Annual Access Control Review
Audit Logging
Audit Logs Data Points
Availability
5 controls
Auto-Scale Configuration
Backup Integrity and Completeness
Backup Monitoring
Backup Policy
Change Management
5 controls
Version Control System
Automated Configuration Change Management
Baseline Configuration and Hardening Standards
Change Management Policy
Communication
5 controls
ISMS Communication Plan
Communication with Security and Privacy Organizations
Disclosure with 3rd Parties
Notification of Disclosures to Third Parties
Subprocessors
Data stored in
| Company | Data accessed | Data location |
|---|---|---|
A AWS aws.com | All Customer Data is stored including PII | US |
AWS
All Customer Data is stored including PII
US
Need something that isn't here?
Uproot-Staging's security team reads every email to [email protected].