Security / trust page — Grain

Cited by

Facts read from this source

• SOC 2 type2 Report an error

  “Grain is SOC 2 Type II certified. SOC 2 Type II audit ensures that we conform to the American Institute of Certified Public Accountants (“AICPA”) SOC 2 standard.”

• SSO Report an error

  “If you are an Enterprise customer and have SSO set up for your business, you can require users to log in to Grain using their SSO credentials.”

• Provider Report an error

  “Grain hosts all its software in Amazon Web Services (AWS) facilities in the USA.”

• Vpc Report an error

  “100 percent of Grain's primary application servers are located within Grain’s own virtual private cloud (VPC), protected by restricted security groups”

• Stack Report an error

  “Web application architecture and implementation are built in Elixir/Erlang with the Phoenix framework and follow OWASP guidelines.”

• Pentest Report an error

  “Grain conducts application penetration testing by a third-party at least annually in addition to Grain's continued internal testing and review program.”

• Encryption transit Report an error

  “All connections to Grain are encrypted using SSL, and any attempt to connect over HTTP is redirected to HTTPS. We maintain an A+ grade for Qualys/SSL Labs.”

• Encryption rest Report an error

  “All customer data (including call recordings and transcripts) is encrypted at rest and in transit.”

• Storage Report an error

  “We use industry-standard AWS-managed PostgreSQL RDS and Elastic Search data storage systems.”

• Code reviews Report an error

  “Design of all new product functionality is reviewed for security impact, with Grain conducting mandatory code reviews for all changes to the code.”

• Terraform iac Report an error

  “Our infrastructure is defined and deployed using Terraform, with all changes reviewed prior to deployment.”

• Vulnerability disclosure Report an error

  “If you have discovered a security or privacy issue that you believe we should know about, we would be eager to hear from you.”

• Security response SLA Report an error

  “please reach out to us at security@grain.com. We have a policy of responding to security reports within 24 hours.”

• Trust center Report an error

  “For more information, you can see our security details on our Trust Center.”

• Free tier Report an error

  “Try Grain today. It’s free forever.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Management Consultant Retention, AI training & administration
• The Management Consultant European sovereignty
• The Data Protection Officer Retention, AI training & administration
• The IT Lead Retention, AI training & administration
• The IT Lead European sovereignty
• The Sales Team Lead Retention, AI training & administration
• The Sales Team Lead European sovereignty
• The Skeptic European sovereignty
• The Works Council Chair Retention, AI training & administration
• The Works Council Chair European sovereignty