float

Security and trust center evidence

The #1 rated resource management

float.com Project managementLast verified 26 Oct 2026

Request the report Are you float?

SOC 2Vendor-stated

GDPRVendor-stated

DPFVerified

float has 1 registry-verified row and 2 vendor-stated rows in the CertReports index, last verified 26 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 Type I on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

float states on its trust centre that it has a SOC 2 Type I report, as of 30 Sep 2026. float states on its trust centre that it addresses GDPR, as of 30 Sep 2026. float is listed in the EU-US Data Privacy Framework registry as active for SW-US Certification and EU-US Certification, issued 10 Mar 2019 and expiring 14 Oct 2027, as of 19 Oct 2026. No public evidence found for PCI DSS as of 19 Oct 2026, so no PCI DSS listing is confirmed. No public evidence found for HIPAA as of 19 Oct 2026, so no BAA offering is confirmed.

SOC 2: vendor states SOC 2 Type I report on its trust centre (as of 30 Sep 2026)
GDPR: vendor states on its trust centre (as of 30 Sep 2026)
EU-US DPF: listed as active, issued 10 Mar 2019, expires 14 Oct 2027 (as of 19 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Oct 2026; it is regenerated whenever a row changes.

Among project management vendors

1verified rows

Category median 1, across 51 indexed project management vendors. float has more verified rows than 47 percent of them.

capacity planningresource managementresource schedulingwork management

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Data processing agreement

Public · Listed on the trust centre as "Data Processing Agreement" · as of 30 Sep 2026

Open

Subprocessor list

Public · 19 subprocessors listed on the trust centre · as of 30 Sep 2026

Open

Public · as of 30 Sep 2026

Open

Subprocessors (19)

AI
AivenData storage and streaming for application operations · United States
AmplitudeData analytics
AnthropicUsed for data analysis · US
AW
AWSCloud provider
BR
BraintreeUsed for taking payments for Float. · United States
CL
CloudAQMPData streaming for platform operation · United States
DatadogUsed for platform operation stability monitoring. · United States
GongSales engagement management · United States
Google Cloud PlatformApplication operation · United States
Google WorkspaceEmails and documentation · United States
HubSpotMarketing
IntercomSupport operations · United States
Launch DarklyPlatform operation · United States
Mailer LiteCustomer communications · United States
MongoDB AtlasDatabase services for platform operations · United States
NO
NotionInternal documentation, planning and issue tracking. · United States
PostHogUsed to get product feedback from customers. · United States
RecurlyCustomer billing and notifications · United States
RollbarUsed for platform operation stability monitoring. · United States

Security profile

Pen test cadence: annual

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

19 Oct 2026EU-US Data Privacy Framework state changedState moved from Expired to Verified.
22 Sep 2026DPA changedThe data processing agreement URL changed.
18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
18 Sep 2026Subprocessor added: AWSAWS appeared on the subprocessor list.
18 Sep 2026Subprocessor added: AivenAiven appeared on the subprocessor list.
18 Sep 2026Subprocessor added: AmplitudeAmplitude appeared on the subprocessor list.
18 Sep 2026Subprocessor added: AnthropicAnthropic appeared on the subprocessor list.
18 Sep 2026Subprocessor added: BraintreeBraintree appeared on the subprocessor list.
18 Sep 2026Subprocessor added: CloudAQMPCloudAQMP appeared on the subprocessor list.

Similar vendors with evidence

Related by product tags and the Project management category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.