SOC 2

Resend is SOC 2 Type II compliant.  We partner with third-party firms to conduct regular audits. ## Ask AI to explain Get a concise, human-readable summary of this security page. ## [What is SOC 2?](#what-is-soc-2) SOC 2 is an audit report developed by the American Institute of CPAs (AICPA). The audit evaluates controls related to security, availability, processing integrity, confidentiality, and privacy of a system. There are two types of SOC 2 reports: -   Type I: checks if a company is compliant at a point in time.-   Type II: confirms that a company is still compliant during an observation window (typically 6 months). Resend is SOC 2 Type II compliant. ## [Why is SOC 2 important?](#why-is-soc-2-important) SOC 2 is not mandatory in a legal sense, and certification isn't required by law. Still, we believe that SOC 2 is crucial because it encourages companies to have solid controls in place to protect customer data. For us, this isn't a short-term growth play but the beginning of a long-term security investment. ## [Who audited Resend?](#who-audited-resend) The auditing was done by [Advantage Partners](https://advantage-partners.com/) which has a track record of partnering with many SaaS companies. Resend also uses [Vanta](https://vanta.com/) to monitor, collect, and submit evidence to auditors. ## [When were you audited?](#when-were-you-audited) The reporting period is from February 1, 2025 to February 1, 2026. The SOC 2 Type II report, the annual penetration test Letter of Attestation, and the signed DPA are all on the [Documents](https://resend.com/settings/documents) page (login required). For GDPR, data transfers, and sub-processors, see the [GDPR overview](https://resend.com/security/gdpr) and the [DPA](https://resend.com/legal/dpa). ## [Can you answer a questionnaire?](#can-you-answer-a-questionnaire) Most questionnaire items are answered on the [Security](https://resend.com/security) overview, the [DPA](https://resend.com/legal/dpa), the [subprocessors](https://resend.com/legal/subprocessors) list, and the [GDPR overview](https://resend.com/security/gdpr). If you still need a questionnaire filled, please [contact us](https://resend.com/support#contact).