Amith Raj

External Penetration Testing (PenTest) is a critical security measure aimed at identifying vulnerabilities in Fluent Commerce’s environments. This policy outlines the guidelines and procedures clients must follow to conduct PenTests responsibly while safeguarding shared infrastructure and ensuring service continuity. It emphasizes the importance of proper authorization, notification, and adherence to security protocols to maintain the integrity and confidentiality of systems and data.

Fluent Commerce ensures trust and assurance through robust security measures, compliance with global regulations like GDPR, and certifications such as SOC 2 Type 2. The platform guarantees high availability, privacy controls, and scalability via its cloud-native infrastructure.

Description of the technical and organisational measures implemented by the Fluent Commerce (including any relevant certifications) to ensure an appropriate level of security, taking into account the nature, scope, context and purpose of the processing, and the risks for the rights and freedoms of natural persons.

This document outlines the shared responsibilities between Fluent Commerce and the Client, emphasizing data security, compliance, and user access management.

Fluent Commerce prioritizes SOC 2 Type 2 attestation over SOC 1 / ISAE 3402 due to its focus on order management, fulfillment, and inventory processes. SOC 2 Type 2 evaluates controls across Security, Availability, Processing Integrity, Confidentiality, and Privacy, addressing customer concerns about data protection and system reliability. Annual audits reinforce Fluent Commerce's commitment to these areas.