Higgsfield Completes SOC 2 Type II Audit and GDPR Assessment
Higgsfield has completed a SOC 2 Type II audit and an independent assessment of its compliance with the EU General Data Protection Regulation. The company says the resulting reports and attestation give customers more information to assess its security controls and privacy practices.
- Higgsfield completed a SOC 2 Type II audit.
- The company completed an independent GDPR assessment.
- The assessment produced a GDPR audit report and compliance attestation.
- Customers can request the documents through Higgsfield’s Trust Center.
- The GDPR program includes data processing terms, transfer safeguards and data subject request processes.
Independent review of security controls
According to Higgsfield Director of Security Evgeny Bugrov, the SOC 2 Type II audit assessed both the design of the company’s security controls and how effectively those controls operated during the review period.
The audit gives customers documentation they can use when evaluating Higgsfield’s approach to security. The company describes the report as part of the information available to teams reviewing its controls before or during a relationship with the platform.
GDPR program covers contracts and data requests
Higgsfield’s independent GDPR assessment resulted in a GDPR audit report and a compliance attestation. Its GDPR program includes agreements, safeguards and processes addressing how the company handles personal data.
The program includes a Data Processing Agreement, which sets out terms for processing personal data on behalf of customers. It also includes Standard Contractual Clauses as contractual safeguards for applicable international transfers of personal data.
Another component is a set of data subject request processes. These cover responses to requests from data subjects, including requests for access and deletion.
Documents available through the Trust Center
Higgsfield says the reports are intended for several groups involved in evaluating a creative platform. Security teams can review the controls assessed in the SOC 2 Type II report. Legal and procurement teams can use the privacy documentation when assessing data processing arrangements.
The documents are available through Higgsfield’s Trust Center. Customers can request access to the SOC 2 Type II report, the GDPR Compliance Audit Report and the Attestation of GDPR Compliance. The company directs anyone needing help with access to contact [email protected].
For customers, the announcement provides a clearer route to documentation used in security and privacy reviews. Higgsfield says it will continue investing in its security and privacy programs, policies and controls as the company grows, and that independent assessments are part of this ongoing work.
Higgsfield: Higgsfield Completes SOC 2 Type II Audit and Independent GDPR Assessment
