SOC 2 company profile

What SOC 2 provider does SurveyMonkey use?

See the auditors, compliance platforms, and trust-center services connected to SurveyMonkey’s SOC 2 program.

SOC 2 statusself attested

Report typeType II

Providers found1

Last checked2026-08-29

Providers

SurveyMonkey’s SOC 2 stack

compliance platform

Vanta

Vanta is named in SurveyMonkey's security or compliance materials.

esource CenterBlogTrust CenterFree ToolsLearning LabNewSUPPORTHelp CenterNew study: The cost of losing curiosityThese 3 behaviors will either crush or cultivate your competitive advantage.Read reportEnglish (US)English (UK)DeutschFrançaisNederlandsDanskEspañolSuomiItaliano日本語한국어NorskPortuguêsРусскийSvenskaTürkçe中文(繁體)Contact SalesLog inSign up freeProductsSurveyMonkeyLaunchPadNewApplyOTHER PRODUCTSGetFeedbackNewWufooSURVEYMONKEY FEATURESNew

Checked 2026-08-29

View source ↗

Primary compliance evidence

SurveyMonkey public statement

✔ Customer control of data✔ AI governance✔ Standard Contractual Clauses (SCCs) by default✔ Data Privacy Framework (DPF) self-certified✔ Robust privacy impact assessment processes✔ SOC 2 Type II✔ ISO-27001✔ CCPA✔ HIPAA**✔ PCI DSS✔ GDPR (EU, UK, Switzerland) **BAAs available as add-on with the Enterprise plan; must be purchased separately✔ Single Sign-On (SSO)*✔ Two-factor authentication (2FA)✔ Account control*✔ Data deletion on a self-service basis o

Classification: self attested · checked 2026-08-29

Open source ↗