Float is SOC 2 compliant, and we hold ourselves to a high standard around how customer data is collected, stored, and shared. We don't sell, trade, or rent personal information, and customers can view, correct, export, and delete their own data anytime through the app or API.

The details live on our product site, that's the source of truth, not this page:

• Privacy Policy
• Security and Privacy at Float
• Data security and privacy (Help Centre)

Trust Centre access :vanta:

Customers and prospects who want to see our compliance evidence directly (SOC 2 report, security documentation, policies) can request access through our Trust Centre, powered by Vanta:

• trust.float.com — browse our security and compliance overview, and request access to gated documents like the full SOC 2 report
• trust.float.com/faq — common questions about what's available and how access works

Access to some documents may require approval before they're shared, which is normal and handled through the Trust Centre itself.

Third-party subprocessors

Third-party subprocessors matter because any tool that touches customer data extends our responsibility to protect it, so it's worth knowing they exist and that we've vetted them.

For details on any specific tool, what it does, and which team owns it, check the master tool list rather than this page, so there's one place to keep current.

Page Ownership: SRE, @Chris Nash