Botdoc moves regulated documents for banks, healthcare systems, schools, and dealerships. Our security posture is examined annually and documented for customer review.
Quick links:
Botdoc's controls are examined annually under SOC 2 Type 2 (Security Trust Services Criteria). Our most recent report covers the full 2025 calendar year with a clean, unqualified opinion. The report and our 161-control vendor risk assessment, mapped to the NIST Cybersecurity Framework, are available to customers and partners under NDA.
Documents are encrypted in transit with TLS and at rest with AES-256, under per-transaction keys generated and stored in Azure's hardened key store, where no person can view them. There is no master key. Data is purged automatically after the delivery window.
Botdoc runs on Microsoft Azure, which maintains its own ISO/IEC 27001 certification and independent attestations. Botdoc's application-layer controls are examined separately under our SOC 2 program.
Multi-factor authentication is enforced on production systems and employee accounts. Single sign-on is supported via Auth0, with Okta integration available. Access follows least privilege with logged administrative activity.
Continuous 24x7 monitoring with independent weekly vulnerability scanning. We maintain a public vulnerability disclosure policy and welcome good-faith security research: botdoc.io/our-terms/vulnerability-disclosure/. Botdoc is a CISA Secure by Design pledge signatory.
Request the compliance portfolio (SOC 2 Type 2 report, vendor risk assessment, policies, insurance certificate) through your account contact or sales@botdoc.io. Right to audit is granted to clients and their member associations.
System failures, suspected incidents, or general issues: support@botdoc.io. Suspicious or fake emails: forward the entire email, including header information, to support@botdoc.io, then delete it from your mailbox. Unethical behavior: anonymous@botdoc.io.
Routine maintenance, new features, fixes, updates and other important announcements appear on the Botdoc blog.
View the latest updates and announcements on the Botdoc blog →