SOC2 Type II Audit Reports
Proofpoint has available for download a SSAE18 SOC2 Type II audit report for the following services:
- Proofpoint Enterprise Archive, Proofpoint Email Protection, Proofpoint Email Encryption, Proofpoint Key Service, Proofpoint Email Continuity, and Proofpoint Patrol
- Trust Services Criteria: Availability, Confidentiality, and Security
- Proofpoint Common Enterprise Services
- Trust Services Criteria: Security
- Identity Threat Defense Platform (ITDP) - Spotlight and Shadow
- Trust Services Criteria: Availability, Confidentiality, and Security
- Targeted Attack Protection for Attachment Defense/URL Defense (TAP AD/UD)
- Trust Services Criteria: Availability, Confidentiality, and Security
- Cloudmark
- Trust Services Criteria: Availability and Security
- Proofpoint Core Email Protection SEG/API (Adaptive Email DLP, Core Email Protection API, Cloud Threat Response Auto Pull)
- Trust Services Criteria: Availability, Confidentiality, and Security
- Proofpoint Prime Impersonation Protection (Email Fraud Defense, Secure Email Relay, Virtual Takedown (AKA Takedown))
- Trust Services Criteria: Availability, Confidentiality, and Security
- Proofpoint Prime User Protection (ZenGuide, CLEAR - PhishAlarm/Analyzer)
- Trust Services Criteria: Availability, Confidentiality, and Security
- Proofpoint Combined SaaS Solutions - Legacy Tessian and Normalyze (Email Exfil Protection, Misdirected Email Protection, Architect, Defender, DPSM)
- Trust Services Criteria: Availability, Confidentiality, and Security
Please note that SOC 2 reports do not expire. The dates in the report are the dates covered by the audit, not the dates for which the report is valid.
*Note that an email with a link to the report(s) will come from [email protected]. If you do not receive the link within 1-2 hours, please check your Junk folder or reach out to your sales representative.
