generated: '2026-07-19'
method: searched
probe: false
url: https://funnel.io/funnel-information-security-overview
also:
- https://funnel.io/funnel-data-privacy-and-security
certifications:
- ISO 27001:2022
- SOC 2 Type II
- CSA STAR Level 1
practices:
- Annual independent third-party penetration testing
- Internal penetration testing
evidence:
- source: https://funnel.io/funnel-information-security-overview
  keywords:
  - iso 27001:2022
  - soc 2 type 2
  - csa star
  - penetration test
notes: >-
  Funnel publishes an Information Security Overview page (not a hosted trust.funnel.io portal, which
  does not resolve) documenting named certifications. The probe-security-programs.py script did not
  detect it (non-standard path); captured here by manual search. No public bug bounty / security.txt /
  responsible-disclosure contact was found, so no VulnerabilityDisclosure artifact is emitted.