Question 1

Does Medallia have SOC 2 Type II?

Accepted Answer

Yes. Medallia holds SOC 2 Type II, SOC 2 Type I, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, HIPAA, HITRUST, FedRAMP, PCI DSS, GDPR, CCPA, CSA STAR, NIST certifications. You can view their trust center at trust.medallia.com for full security and compliance documentation.

Question 2

Where can I find Medallia's security documentation?

Accepted Answer

Medallia publishes their trust center on SafeBase at trust.medallia.com. It includes security policies, compliance certifications (SOC 2 Type II, SOC 2 Type I, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, HIPAA, HITRUST, FedRAMP, PCI DSS, GDPR, CCPA, CSA STAR, NIST), and other documentation.

Compliance & Certifications

More on SafeBase