Secureframe

Secureframe is Propeller’s compliance hub, used to manage customer security document requests, vendor risk reviews, and employee compliance tasks. Customers can request access to sensitive security documents through Propeller’s Trust Center, such as SOC 2 reports, penetration test results, and security policies; approvers review each request in Secureframe, approve legitimate customer requests, usually require a clickwrap NDA, and deny anything that does not appear valid. Internally, vendor owners use Secureframe to review the vendors they manage, update vendor details, assess risk levels, complete access reviews, and provide documentation needed for SOC 2 obligations. Employees may also receive Secureframe tasks for security awareness training, GDPR training, and policy acknowledgments.

We use Secureframe to track, document, confirm, and complete our audits and third-party attestations for SOC 2, ISO 9001, ISO 27001, and GDPR. We also use it to track our vendor management, document our risk, help track ID and access change management, etc.

The integrations Secureframe has also allow us to verify the data we receive from other monitoring tools when it comes to baseline configurations, track vulnerabilities, policy management and acknowledgement, training, and background checks.

Vanta

We used Secureframe to setup and monitor and support audits for our compliance and policies for SOC 2

Drata and Vanta

CockroachDB, SonarQube, Atlassian Jira