SOC 2 company profile

What SOC 2 provider does Duolingo use?

See the auditors, compliance platforms, and trust-center services connected to Duolingo’s SOC 2 program.

SOC 2 statusself attested
Report typeType I
Providers found2
Last checked2026-08-30
Providers

Duolingo’s SOC 2 stack

trust center

Vanta Trust Center

Vanta Trust Center appears in Duolingo's public security materials.

Trust center observed at trust.vanta.com.

Checked 2026-08-30
View source ↗
compliance platform

Vanta

Vanta appears in Duolingo's public security materials.

:** SOC 2 Type I - **Report type:** Type I - **Auditor or CPA firm:** Not stated (details are restricted to the SOC 2 Type I report document) - **Compliance automation platform:** Vanta (indicated by 'Powered by Vanta') - **Trust-center provider:** Vanta - **Frameworks:** ISO 27001:2022, SOC 2 Type I, GDPR - **Dates:** Not stated on the public-facing pages - **Named provider relationships:** - 'Powered by Vanta' (Compliance/Trust Center) - '

Checked 2026-08-30
View source ↗

Primary compliance evidence

Duolingo public statement

Based on the Duolingo English Test Trust Center (https://trust.englishtest.duolingo.com/), here is the exact visible text relevant to the requested categories: - **SOC 2 status:** SOC 2 Type I - **Report type:** Type I - **Auditor or CPA firm:** Not stated (details are restricted to the SOC 2 Type I report document) - **Compliance automation platform:** Vanta (indicated by 'Powered by Vanta') - **Trust-center provider:** Vant

Classification: self attested · checked 2026-08-30
Open source ↗
SOC 1SOC 2SOC 3Type IType IIAudit readinessTrust centersVendor riskSecurity evidenceProcurement