Skip to content
BoodleBox Help Center home

Incident response process overview

Updated by BoodleBox

Goal

Understand how BoodleBox handles security incidents, and where to report or find documentation.

How BoodleBox approaches incidents

BoodleBox holds a SOC 2 Type II report from an independent auditor, which also covers HIPAA and GDPR criteria. SOC 2 Type II covers how well our security controls work over time, including monitoring and incident-response controls. Our data is stored in US-based data centers.

For the authoritative description of these controls, the SOC 2 Type II report and related compliance documentation are available through the Trust Center.

Report a suspected incident or vulnerability

  • Email compliance@boodle.ai with what you observed, when, and any supporting detail (screenshots, error messages, the account/institution involved).

  • Security reports are acknowledged and reviewed by the security team. Please keep sensitive details out of public channels.

Find the documentation

  • Trust Center: https://trust.boodlebox.ai/ — SOC 2 Type II (which also covers HIPAA and GDPR criteria), HECVAT, VPAT, TX-RAMP and more. Some documents are immediately viewable; others (like the full SOC 2 Type II report) are available on request through the Trust Center.

Questions?

Security and compliance: compliance@boodle.ai. General support: success@boodle.ai (typical response within 8 business hours).