Security Status Page
Overview
Attentive provides two-way, real-time, personalized communication between businesses and consumers via text message. Our software platform helps businesses manage relationships with their consumers over text and drive e-commerce revenue.
Attentive uses industry-proven technologies and practices to protect client data and secure our platform. For questions not covered here, please contact us at security@attentivemobile.com
Compliance
Documents
Product Security
Reports
Data Security
App Security
Legal
Access Control
Infrastructure
Endpoint Security
Network Security
Corporate Security
Policies
Security Grades
Trust Center Updates
Attentive's SOC 2 Type 2 report for the audit period May 1, 2022 to October 31, 2022 is now available to request and download from our Security Status Page.
-Attentive's Information Security Team
Attentive became aware of the critical vulnerability in Spring's software library on Wednesday, March 30th as part of our threat intelligence program. We initiated an incident response mechanism to determine Attentive's use of the library, identify mitigations, and implement protections across our technology environment. More specifically, we determined that a potentially vulnerable version of the Spring Framework was used in various components in our system, which we mitigated through both patching (upgrading to the non-vulnerable version of the library) and through other protective measures. We currently remain in a heightened state of awareness given the severity of this vulnerability and shall remain so until we are confident that our mitigations are effective and holistic.
Our Security team is available to speak to you about our response efforts, should you wish to ask further questions or compare notes on our understanding of the threat and how to mitigate it.
-Attentive's Information Security Team
If you think you may have discovered a vulnerability, please send us a note.