# Gable

Gable is a data collaboration and change management platform that leverages data contracts (metadata APIs) to enforce agreements between data producers and consumers. The contracts ensure that changes to schemas, semantics, and source-system SLAs are known by the business before negative impacts are felt downstream.

Gable is SOC 2 Type 2 compliant. Our team is comprised of veterans in the data space, who recently led the Data Platform team at Convoy. We've experienced tremendous early traction, with around 100,000 followers, thousands of community members, and 10,000+ newsletter subscribers. Please contact us if you have any questions!

## Compliance

SOC 2 Type 2

## Resources

- [Data Management Policy](https://trust.gable.ai/?requestAccessOpen=true&requestedResources=65ea669f6af50d8aa7bb8d20)
- [Risk Management Policy](https://trust.gable.ai/?requestAccessOpen=true&requestedResources=65ea669f6af50d8aa7bb8d21)
- [Access Control Policy](https://trust.gable.ai/?requestAccessOpen=true&requestedResources=65ea669f6af50d8aa7bb8d22)
- [SOC 2 Type II](https://trust.gable.ai/?requestAccessOpen=true&requestedResources=670033c33beab8798f7db371)

## Controls

Updated 1 minute ago

### Infrastructure security

- Unique account authentication enforced
- Production application access restricted
- Production database access restricted

### Organizational security

- Production inventory maintained
- Anti-malware technology utilized
- Password policy enforced

### Product security

- Data encryption utilized
- Control self-assessments conducted

### Internal security procedures

- Board oversight briefings conducted
- Board charter documented
- Board expertise developed

## Data collected

- Employee personally identifiable information
- Customer personally identifiable information
- Credit card information
- Personal health information

## Subprocessors

- Amazon Web Services: Cloud Hosted Infrastructure and Data Hosting, Cloud Computing
- Datadog: Cloud monitoring, Metrics, logs, traces

## FAQ

### Do you encrypt data at rest?

* * *

### Where are your servers located?

* * *

### Do you support Single Sign-On (SSO)?

* * *

### How do I report a potential security issue?

Vanta connects to a company's core systems to continuously monitor these controls.