Companies / Secureframe / Subprocessors
Secureframe provides a platform that automates security compliance and risk management, including evidence collection, continuous monitoring, and support for frameworks such as SOC 2, ISO 27001, HIPAA, and CMMC. It serves organizations seeking to get and stay compliant, including defense contractors protecting controlled unclassified information.
Summarized from its homepage on 3 Nov 2026.
548 Market Street, Suite 30287, San Francisco, CA, 94104, US
Subprocessors of Secureframe
Secureframe declares 9 subprocessors, including AI providers OpenAI.
| Subprocessor | Purpose |
|---|---|
| Cloud Hosting Services | |
| Feature Flag Management | |
| Email Communications and Product Notifications | |
| Cloud-based monitoring and analytics platform | |
| Error tracking | |
| Email Communications and Product Notifications | |
| Data Import Structuring | |
| AI platform and large language model capability. | |
| Email Communications and Product Notifications |
Questions about Secureframe
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| FedRAMPListed in registry | Secureframe Platform, 20x LowListed as FedRAMP Authorized in the official FedRAMP Marketplace data. | 8 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Secureframe lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Secureframe's full stack
Every vendor with its source and date, and an alert when Secureframe adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call