---
url: "https://resend.com/security/soc-2"
title: SOC 2
domain: resend.com
locale: en
type: other
author: Resend
words: 285
cited_by: 1
indexed_by: stealpage
---

Resend is SOC 2 Type II compliant.  
We partner with third-party firms to conduct regular audits.

## Ask AI to explain

Get a concise, human-readable summary of this security page.

## [What is SOC 2?](#what-is-soc-2)

SOC 2 is an audit report developed by the American Institute of CPAs (AICPA).

The audit evaluates controls related to security, availability, processing integrity, confidentiality, and privacy of a system.

There are two types of SOC 2 reports:

-   Type I: checks if a company is compliant at a point in time.
-   Type II: confirms that a company is still compliant during an observation window (typically 6 months).

Resend is SOC 2 Type II compliant.

## [Why is SOC 2 important?](#why-is-soc-2-important)

SOC 2 is not mandatory in a legal sense, and certification isn't required by law.

Still, we believe that SOC 2 is crucial because it encourages companies to have solid controls in place to protect customer data.

For us, this isn't a short-term growth play but the beginning of a long-term security investment.

## [Who audited Resend?](#who-audited-resend)

The auditing was done by [Advantage Partners](https://advantage-partners.com/) which has a track record of partnering with many SaaS companies.

Resend also uses [Vanta](https://vanta.com/) to monitor, collect, and submit evidence to auditors.

## [When were you audited?](#when-were-you-audited)

The reporting period is from February 1, 2025 to February 1, 2026.

The SOC 2 Type II report, the annual penetration test Letter of Attestation, and the signed DPA are all on the [Documents](https://resend.com/settings/documents) page (login required).

For GDPR, data transfers, and sub-processors, see the [GDPR overview](https://resend.com/security/gdpr) and the [DPA](https://resend.com/legal/dpa).

## [Can you answer a questionnaire?](#can-you-answer-a-questionnaire)

Most questionnaire items are answered on the [Security](https://resend.com/security) overview, the [DPA](https://resend.com/legal/dpa), the [subprocessors](https://resend.com/legal/subprocessors) list, and the [GDPR overview](https://resend.com/security/gdpr). If you still need a questionnaire filled, please [contact us](https://resend.com/support#contact).