Wolken Software Trust Center
Last updated: October, 2026
Trust, built into every interaction
At Wolken Software, protecting customer information is fundamental to how we design, develop, and operate our products and services.
Our approach to trust brings together information security, privacy, secure software development, operational resilience, and responsible AI governance. We work to protect the confidentiality, integrity, and availability of information entrusted to us while helping our customers manage their business and service workflows with confidence.
Questions or concerns? Contact us at shashi@wolkensoftware.com
Independent assurance and data protection
Wolken Software is committed to maintaining appropriate controls and data protection practices to support the security, reliability, and privacy needs of our customers.
SOC 1 Type II
Our SOC 1 Type II reporting provides information about the controls relevant to customer organizations' internal control over financial reporting, within the scope of the applicable examination.
SOC 2 Type II
Our SOC 2 Type II examination provides independent assurance regarding the controls included within the applicable examination scope and reporting period. The report addresses the relevant Trust Services Criteria identified in the examination.
GDPR and data protection
We are committed to protecting personal data and supporting applicable data protection obligations, including those under the General Data Protection Regulation (GDPR), where applicable. Our privacy and data handling practices address relevant requirements concerning the processing, protection, and management of personal data.
GDPR is a legal and regulatory framework rather than a certification or independent audit report. Our applicable obligations depend on the nature of the processing activities and the relevant legal and contractual requirements.
Cloud Security Alliance (CSA) STAR
We are listed in the Cloud Security Alliance (CSA) Security, Trust, Assurance, and Risk (STAR) Registry under the Level 1 Self-Assessment program. Our SOC 2+ Type II controls are mapped to the applicable Trust Services Criteria (TSC) and the 17 control domains of CSA’s Cloud Controls Matrix (CCM), providing enhanced transparency into our cloud security and compliance posture.
Request assurance documentation
Enterprise customers and prospective customers may request relevant SOC 1 Type II and SOC 2 Type II reports, along with supporting security, privacy, and data protection documentation, subject to report scope, availability, eligibility, and confidentiality requirements.
The scope, reporting period, and applicability of independent assurance reports are defined in the respective reports. Please contact us for additional information about the documentation available for your service.
Information security
We take a risk-based approach to information security, with safeguards intended to protect our systems, applications, and customer information.
Our security program addresses:
- 1
Security governance: Policies, standards, risk management, and assigned security responsibilities.
- 2
Identity and access management: Access controls designed to limit access to authorized users and approved business needs.
- 3
Infrastructure security: Cloud and application infrastructure safeguards appropriate to our services and architecture.
- 4
Security monitoring: Monitoring and investigation capabilities to help identify and respond to potential threats.
- 5
Vulnerability management: Processes for identifying, prioritizing, and remediating security weaknesses.
- 6
Security awareness: Practices intended to help personnel understand and fulfill their security responsibilities.
The specific safeguards applicable to each service depend on its architecture, configuration, and operating model.
Secure software development
Security is considered throughout our software development and release lifecycle.
Our engineering practices are designed to help identify and address security risks through appropriate code review, security testing, dependency assessment, vulnerability remediation, and controlled change management.
We continually evaluate opportunities to strengthen our development practices as our products, technologies, and threat landscape evolve.
Privacy and customer data protection
We recognize that customer trust depends on responsible handling of information.
Our approach to data protection considers data sensitivity, authorized access, secure processing, retention requirements, and applicable legal and contractual obligations.
We seek to limit access to customer information to authorized purposes and apply appropriate technical and organizational safeguards to reduce the risk of unauthorized access, disclosure, loss, or modification.
Our collection, use, processing, retention, and deletion of personal information are governed by the applicable privacy notices, contractual terms, and service-specific arrangements.
Cloud infrastructure and operational security
Our cloud-hosted services use AWS infrastructure. We consider infrastructure security, identity governance, network exposure, workload protection, configuration management, and operational monitoring as part of our security approach.
We use appropriate monitoring and operational processes to support the identification, investigation, and remediation of security and reliability issues.
Security responsibilities are shared between Wolken Software and its infrastructure and service providers according to the applicable service model and contractual arrangements.
AI security and responsible AI
As AI capabilities are integrated into enterprise workflows, security and data protection remain important design considerations.
Our approach to AI-enabled functionality considers:
- 1
Appropriate authorization and access controls for AI-enabled workflows.
- 2
Protection of customer information throughout relevant data flows.
- 3
Security of integrations with external services and tools.
- 4
Risks associated with prompt injection, unauthorized tool execution, and unintended information disclosure.
- 5
Monitoring, testing, and review appropriate to the AI feature and its intended use.
AI controls are evaluated in the context of each feature's architecture, data access, provider dependencies, and intended purpose. Specific controls and limitations may vary by service and configuration.
Vulnerability disclosure
We encourage responsible reporting of suspected security vulnerabilities affecting Wolken Software products and services.
To report a vulnerability, email shashi@wolkensoftware.com with:
- 1
The affected product or service.
- 2
A description of the potential vulnerability and its impact.
- 3
Reproduction steps or supporting technical details, where available.
- 4
Any relevant timestamps or request identifiers that can be safely shared.
Please do not include passwords, authentication tokens, customer records, or unnecessary personal or confidential information in your report.
We will assess submissions and coordinate follow-up as appropriate.
Service availability and resilience
We recognize that service reliability is an important part of customer trust.
Our operational practices support service monitoring, incident management, and appropriate continuity and recovery activities. Service commitments, availability targets, and recovery objectives are defined by the applicable service documentation and contractual agreements.
Third-party and supply-chain security
We recognize that external service providers and technology dependencies can affect the security and reliability of our services.
Our approach considers relevant third-party risks, provider responsibilities, and the security implications of integrations and dependencies. Assessments and controls are applied according to the provider's role, access, and potential impact.
Customers seeking information about relevant service providers or subprocessors can contact us through the assurance portal.
Enterprise security and compliance documentation
We understand that customers may need additional information to complete security reviews, vendor risk assessments, and procurement processes.
Our assurance process supports eligible customers and prospects seeking relevant documentation, which may include:
- 1
SOC 2 Type II report, subject to applicable access and confidentiality requirements.
- 2
Security program and control overviews.
- 3
Privacy and data processing documentation.
- 4
Relevant subprocessor and service-provider information.
- 5
Responses to customer security questionnaires.
- 6
Other approved security and compliance materials.
Availability depends on the document, customer relationship, and applicable confidentiality restrictions. Certain materials may require a nondisclosure agreement or authorized access.
Contact our team
For questions about information security, vulnerability reporting, privacy, or enterprise assurance documentation, contact shashi@wolkensoftware.com.
We welcome appropriate security and privacy inquiries from our customers, prospects, and partners.
Wolken Software Trust Center
Committed to security, privacy, accountability, and transparency.
Last reviewed: October, 2026
The information on this page describes our general security and privacy approach. It does not replace applicable contractual commitments, service-specific terms, or the contents of formal audit and assurance reports.