Requesting Smartcat's SOC 2 / ISO 27001 Documentation
Overview
If you're running a vendor security review of Smartcat — for procurement, InfoSec, or legal due diligence — this article explains which compliance documents Smartcat holds, which ones require an NDA, and how to request them.
What Smartcat holds
Smartcat maintains its own SOC 2 Type II report and ISO 27001 certification, in addition to using data center infrastructure that is separately SOC 1 / SOC 2 / SOC 3 compliant. The following artifacts are available on request:
| Artifact | Description | NDA required? |
|---|---|---|
| SOC 2 Type II report | Smartcat's own audit report (currently covering a 3-month observation period; transitioning to a 12-month cycle) | Yes, for net-new prospects. Not required for existing customers with a signed quote or MSA — confidentiality is already covered by the Customer Agreement. |
| ISO 27001 certificate | The formal certificate confirming Smartcat passed its ISO 27001 audit | No — shareable on request without an NDA |
| ISO 27001 audit report and Statement of Applicability (SoA) | The auditor's detailed ISO 27001 audit report and the SoA, which lists the ISO 27001 controls and how each one applies to Smartcat | Yes, for net-new prospects. Not required for existing customers with a signed quote or MSA — confidentiality is already covered by the Customer Agreement. |
| Penetration test report | Results of Smartcat’s annual penetration test by an independent third party | Yes, for net-new prospects. Not required for existing customers with a signed quote or MSA — confidentiality is already covered by the Customer Agreement. |
| SOC 3 report | A public-facing summary version of the SOC 2 report, designed for sharing without restriction | No |
| Full Trust Center access (architecture diagrams, detailed security policies, SOC 2 and penetration test reports) | An online portal with Smartcat’s security documentation, available to named reviewers | Yes, for full access. Some content — including the GDPR DPA and subprocessor list — is public at smartcat.com/legal/dpa and needs no NDA. |
How to request these documents
-
Contact your Smartcat representative (Sales, CS, or Support) with your request, specifying which document(s) you need and the name and email address of each person who needs Trust Center access..
-
Once the NDA is signed, your representative will share the requested documents.
-
If you're an existing customer with a signed quote or MSA, let your representative know — the SOC 2 report can be released without a fresh NDA, since your existing agreement's confidentiality terms already cover it.
-
Trust Center access is granted once the NDA (or existing-customer exception) is confirmed, giving you access to the full document set in one place. Access expires after 14 days, so ask your Smartcat representative to renew it if you need more time.
Quick reference: what you can get without an NDA
-
ISO 27001 certificate
Smartcat Certificate ISO 27001.pdf -
SOC 3 report
Smartcat Platform Inc. SOC 3.pdf -
GDPR DPA and subprocessor list (public at smartcat.com/legal/dpa)
Want to learn more?
See how Smartcat can transform your localization workflow.
Still need help?
Our support team responds within one business day.