Security / trust page — Cal.com

Cited by

Facts read from this source

• DPA available Report an error

  “Data Protection Agreement Download”

• SOC 2 report available Report an error

  “SOC 2 Type II report Download”

• ISO 27001 certification available Report an error

  “ISO 27001 Certification Download”

• Pentest report available Report an error

  “Penetration test report Download”

• Certifications held Report an error

  “As a company that has achieved ISO 27001, SOC 2 Type II, CCPA, GDPR, and HIPAA certifications”

• Automated compliance platform Report an error

  “we utilize security and compliance automation platforms to ensure that we remain continuously compliant”

• Written security policies Report an error

  “Written information security policies and procedures ensure that the company has documented and tested controls in place to protect customer data and respond to security incidents effectively.”

• Annual external pentest Report an error

  “Cal.com undergoes an external penetration test of our web application annually by a third party to identify any security vulnerabilities we may have”

• Automated vulnerability scanning Report an error

  “We also employ automated vulnerability scanning within our code and it’s dependencies.”

• Database encryption Report an error

  “Having our database encrypted allows customers to feel safe when using our product as it safeguards data when in transit or at rest.”

• Multi factor authentication Report an error

  “Multi-factor authentication helps to prevent unauthorized access to the company's systems, which can help to protect customer data from theft or tampering.”

• Branch protection code review Report an error

  “All changes to our codebase are protected with branch protection, meaning that to be able to push a new code change to production, the code change must have been approved by another engineer, as well as the code change has to pass a number of automated tests that check for security issues”

• Security monitoring Report an error

  “Ongoing monitoring of system access logs and network traffic helps to detect and respond to potential security incidents”

• Employee security training Report an error

  “We make it a priority that these are completed straight away for all new employees and completed annually for all existing employees.”

• Background checks Report an error

  “Background checks are performed on all new hires the company may conduct”

• Quarterly access review Report an error

  “Every quarter we review application access and access levels for all employees”

• Third party audits Report an error

  “Regular third-party audits and assessments provide an independent validation of the effectiveness of the company's information security controls and procedures”

• Intrusion detection Report an error

  “Cal.com utilizes intrusion detection systems to continuously monitor our systems for potential threats”

• Vulnerability disclosure program Report an error

  “If you discover a vulnerability, we would like to know about it so we can take steps to address it as quickly as possible.”

• Bug bounty platform Report an error

  “You can report vulnerabilities here: https://bugcrowd.com/4f0b96d4-2749-415e-b2d8-6aebde98f211/external/report”

• Disclosure scope targets Report an error

  “In scope: Cal.com QA Environment Only the targets listed below are authorized for security testing”

• Trademark holder Report an error

  “Cal.com® and Cal® are registered trademarks of Cal.com, Inc. All rights reserved.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Independent Consultant European sovereignty
• The Data Protection Officer European sovereignty
• The Practice Owner European sovereignty
• The Sales Team Lead European sovereignty
• The Salon Owner European sovereignty
• The Skeptic European sovereignty