---
title: Privacy and Security FAQ
description: Privacy and Security FAQ
---
[Skip to content](https://support.icomplyis.com/en/privacy-and-security-faq#main-content)
[](https://www.icomplyis.com/)
- [Home](https://support.icomplyis.com/en/icomply-mission-control)
- Coverage
- Procedures
- Technical
- Legal
- About Us
Open main navigation
Close main navigation
- [Home](https://support.icomplyis.com/en/icomply-mission-control)
- Coverage
- Procedures
- Technical
- Legal
- About Us
- [Contact Sales](https://icomplyis.com/pricing/book-demo/)
[Contact Sales](https://icomplyis.com/pricing/book-demo/)
Hello. How can we help you?
- There are no suggestions because the search field is empty.
1. [iComply Knowledge Base](https://support.icomplyis.com/en?hsLang=en)
2. [FAQs](https://support.icomplyis.com/en/faqs?hsLang=en)
3. [Product](https://support.icomplyis.com/en/faqs?hsLang=en#product)
November 10, 2026
# Privacy and Security FAQ
| **Privacy and Security Questions** | **Answers** |
| --- | --- |
| **Enterprise Security** | |
| Has your company experienced a security incident in the past 3 years? | No |
| Do you require multi-factor authentication on all enterprise applications and production systems? | Yes |
| Does your company assess the security and privacy practices of all third-party companies with access to customer data? Please describe. | Yes. iComply conducts quarterly reviews with all third-party vendors to ensure adherence to SOC 2 and ISO 27001 standards, in addition to regular access control reviews. |
| Are these assessments repeated on an annual basis? | Yes |
| Please provide a point of contact in case of security issues. | Security Team — security@icomplyis.com |
| | |
| **Product Security** | |
| How often are third party penetration tests conducted against your product/service? | Quarterly |
| ### Does your product/service support integration with Okta as an SSO provider? Yes. iComply supports SSO via SAML 2.0-compatible identity providers, which includes Okta. Contact your iComply account representative to confirm full Okta-specific configuration details and supported protocols (e.g., `SAML 2.0`, `OIDC`). | |
| ### Does iComply support SSO providers other than Okta? Yes. iComply supports SSO via Google (**Login with Google**) and other `SAML 2.0`-compatible identity providers. Contact your iComply account representative to confirm the full list of supported providers and protocols. | Yes |
| ### Does SSO support require an enterprise plan or similar? Yes. SSO is available on select plans. Contact your iComply account representative to confirm current plan availability and pricing. | Yes. SSO requires at least a Pro plan. Please contact your iComply account representative to confirm current plan availability and pricing. |
| If your product doesn’t offer SSO and therefore iComply will be required to use password-based login, does your product comply with all of the below best practices? If not, please list any exceptions. - Password length can be at least 64 characters - Password requirements do not dictate character choices (e.g., a certain number of special characters, numbers, capitals, etc...) - Secret questions are not the sole requirement for password reset process - Require email verification of a password change request - Store passwords in a hashed and salted format using a memory-hard or CPU-hard one-way hash function | Yes. iComply's product supports all of the listed password best practices, including minimum 64-character password length, no forced character-composition rules, email verification for password resets, and storage of passwords using a memory-hard or CPU-hard one-way hashing algorithm with salting. No exceptions apply. |
| How does your company securely back up all product data? | All product data is backed up daily using fully encrypted backups. Backups are stored securely with access controls in place, and restoration procedures are tested regularly to ensure recoverability. |
| Does your company’s product/service encrypt any data prior to insertion into databases (i.e., row level encryption)? Please describe. | Yes. Data is encrypted at the row level and database level. |
| Does your company have a formal process to produce and deploy patches to address application vulnerabilities that materially impact security within defined SLAs (i.e., vulnerability management)? Please describe. | iComply maintains a formal vulnerability management program designed to ensure that application vulnerabilities are identified, assessed, remediated, and deployed into production within defined Service Level Agreements (SLAs). This process is aligned with industry best practices (e.g., ISO 27001, NIST CSF, and OWASP guidance) and supports our commitment to protecting client data and maintaining platform resilience. Critical (CVSS ≥ 9.0 or active exploitation): Patch within 24–72 hours of validation. High severity: Patch within 7 business days. Medium severity: Patch within 30 days. Low severity: Patch within 90 days or included in routine maintenance cycles. |
| | |
| **Data Privacy** | |
| ### Does iComply publish a list of subprocessors with respect to GDPR or CCPA? No. iComply does not currently publish a public subprocessor list. Given iComply's zero-access architecture and data-sovereignty deployment models, subprocessor exposure is minimised by design. Customers with specific `GDPR` or `CCPA` inquiries regarding subprocessors may contact `security@icomplyis.com` for the most up-to-date information. | No |
| ### Is iComply GDPR and CCPA compliant? Yes. iComply maintains compliance with both `GDPR` (applicable to EU/EEA data subjects) and `CCPA` (applicable to California residents). A Data Processing Agreement (DPA) is available upon request. For details on applicable regions, DPA terms, or the most recent compliance audit, contact `security@icomplyis.com`. | Yes |
- [Welcome](https://support.icomplyis.com/en/welcome?hsLang=en#main-content)
- [Introduction](https://support.icomplyis.com/en/welcome?hsLang=en#introduction)
- [Platform Guides & Feature Documentation](https://support.icomplyis.com/en/platform-guides-feature-documentation?hsLang=en#main-content)
- [Home Screen & Navigation](https://support.icomplyis.com/en/platform-guides-feature-documentation?hsLang=en#home-screen-navigation)
- [Platform Overview](https://support.icomplyis.com/en/platform-guides-feature-documentation?hsLang=en#platform-overview)
- [KYC Module](https://support.icomplyis.com/en/platform-guides-feature-documentation?hsLang=en#kyc-module)
- [AML Module](https://support.icomplyis.com/en/platform-guides-feature-documentation?hsLang=en#aml-module)
- [Administration](https://support.icomplyis.com/en/platform-guides-feature-documentation?hsLang=en#administration)
- [Portals](https://support.icomplyis.com/en/platform-guides-feature-documentation?hsLang=en#portals)
- [FAQ](https://support.icomplyis.com/en/platform-guides-feature-documentation?hsLang=en#faq)
- [Compliance & Platform Procedures](https://support.icomplyis.com/en/compliance-platform-procedures?hsLang=en#main-content)
- [Platform Procedures](https://support.icomplyis.com/en/compliance-platform-procedures?hsLang=en#platform-procedures)
- [Security & Privacy](https://support.icomplyis.com/en/compliance-platform-procedures?hsLang=en#security-privacy)
- [Technical & Developer Documentation](https://support.icomplyis.com/en/technical-developer-documentation?hsLang=en#main-content)
- [Introduction](https://support.icomplyis.com/en/technical-developer-documentation?hsLang=en#introduction)
- [Implementation](https://support.icomplyis.com/en/technical-developer-documentation?hsLang=en#implementation)
- [Integration](https://support.icomplyis.com/en/technical-developer-documentation?hsLang=en#integration)
- [Training & Learning Resources](https://support.icomplyis.com/en/training-learning-resources?hsLang=en#main-content)
- [Compliance Education Center](https://support.icomplyis.com/en/training-learning-resources?hsLang=en#compliance-education-center)
- [Regulatory Resources & Industry Guides](https://support.icomplyis.com/en/regulatory-resources-industry-guides?hsLang=en#main-content)
- [Regulatory Resources](https://support.icomplyis.com/en/regulatory-resources-industry-guides?hsLang=en#regulatory-resources)
- [FAQs](https://support.icomplyis.com/en/faqs?hsLang=en#main-content)
- [Support](https://support.icomplyis.com/en/faqs?hsLang=en#support)
- [Product](https://support.icomplyis.com/en/faqs?hsLang=en#product)
[](https://www.iComplyis.com/)
Trust In Every Transaction
www.icomplyis.com
Copyright © 2025, All Rights Reserved, iComply Investor Services Inc