Overview
At Weave, we are deeply committed to safeguarding the data that powers your engineering team's performance, maintaining rigorous industry standards including SOC 2 Type II compliance. We invite you to review our comprehensive security documentation to understand the strict measures and protocols we employ to protect your workflow analytics and ensure your continued trust.
Compliance
Compliance frameworks Weave currently meets or is working toward to uphold their security and privacy commitments.
SOC 2
Compliant
ISO 27001
Compliant
GDPR
Compliant
HIPAA
Compliant
Resource library
Our security, compliance, and policy documentation, including audit reports.
Code of Conduct / Acceptable Use PolicyApril 30, 2026
Information Security PolicyApril 30, 2026
Asset Management PolicyApril 30, 2026
Data Management PolicyApril 30, 2026
Logical Access PolicyApril 30, 2026
Vulnerability Management PolicyApril 30, 2026
Incident Response Plan and PolicyApril 30, 2026
Software Development and Lifecycle Management PolicyApril 30, 2026
Vendor Risk Management PolicyApril 30, 2026
Business Continuity and Disaster Recovery PolicyApril 30, 2026
Information Security Roles and Responsibilities PolicyApril 30, 2026
Risk Management PolicyApril 30, 2026
Human Resource Security PolicyApril 30, 2026
Privacy PolicyApril 30, 2026
Statement of Applicability - Initial Certification 27001October 22, 2026
Weave - Vulnerability Assessment and Penetration Testing (VAPT) ReportOctober 28, 2026
Weave ISO 27001 Audit ReportOctober 28, 2026
Weave SOC 2 Type IOctober 28, 2026
Weave SOC 2 Type IIOctober 28, 2026
Weave - Certificate of Insurance (Cybersecurity)October 28, 2026
WorkWeave, Inc. - ISO/IEC 27001 2022 Official CertificateOctober 28, 2026
Subprocessors
Trusted third parties that support our services and may process customer data as part of their function.
GCP
United States
PostHog
United States
Pylon
United States
Resend
United States
Stripe
United States
