# The Weather Company

_Customers trust us with critical weather data that drives real decisions. We're committed to protecting the confidentiality, integrity, and availability of our systems through industry best practices, continuous monitoring, and strict security controls._

## Compliance

SOC 2 Type II

## Resources

### Enterprise

[TWCo Executive Summary of Policies](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=6a172806ad4bdb973575821d)

[TWCo Data Security and Privacy Principles](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=69e67c5f18c28788726b087d)

[TWCo Data Processing Addendum](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=69e67c5f9643e7dc141089a1)

[TWCo Privacy Policy](https://weather.com/en-US/twc/privacy-policy)

### Aviation

[TWCo SOC 2 Type II Report](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=69e0e929914387b3023c2cf5)

[Fusion Penetration Test Executive Summary - October 2025](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=6a219a40bed8ff880a880d93)

[Fusion Disaster Recovery Exercise Executive Summary_2025](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=6a3abf8e1b2649793ce1190c)

[Pilotbrief Optima Penetration Test Executive Summary - October 2025](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=6a219a3e3486d733e10974a2)

### Weather API

[Weather API Disaster Recovery Exercise Executive Summary_2025](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=6a359f1d79f114b395779606)

[TWCo Weather API Data Sheet](https://trust.weathercompany.com/?requestAccessOpen=true&requestedResources=69e67c5fbd377994742f2b38)

## Controls

[**Access Management**](https://trust.weathercompany.com/controls#access-management)

- Access Provisioning
- Multi-factor Authentication (MFA) / Single-Sign On (SSO)
- Access Revocation

[**Organizational Security**](https://trust.weathercompany.com/controls#organizational-security)

- Information Security Program
- Information Security Policies
- Information Security Team

[**Data Security**](https://trust.weathercompany.com/controls#data-security)

- Encryption at Rest
- Encryption in Transit
- Back-ups

[**Network Security**](https://trust.weathercompany.com/controls#network-security)

- Firewall & Edge Protection
- Intrusion Detection/Prevention (IDS/IPS)
- Network Segmentation

[**Vulnerability Management**](https://trust.weathercompany.com/controls#vulnerability-management)

- Vulnerability Scanning
- Vulnerability Remediation
- Endpoint Protection/Anti-Malware

[**Change Management**](https://trust.weathercompany.com/controls#change-management)

- Change Management Procedures
- Emergency Changes
- Impact Assessment

## Subprocessors

Akamai

- US
- Fusion, Pilotbrief, Maverick Offerings: Hosting, Edge Services
- Weather API: Hosting, Edge Services, Development, Operations, Customer Support, Other

Amazon Web Services (AWS)

- US (Aviation, Weather API), IE (Weather API), SG (Weather API)
- Fusion, Maverick Offerings: Hosting
- Pilotbrief: Hosting, Edge Services, Customer Support, Development, Operations, Security, Monitoring
- Maverick WXAlert: Hosting, Development, Operations
- Weather API: Hosting, Edge Services, Development, Operations, Customer Support, Other

Andela

- US
- Fusion, Pilotbrief: System Administrator
- Maverick Offerings: Development
- Weather API: Operations, Customer Support, Other

Avenga

- US
- Maverick Offerings: Development

## Updates

### Welcome to The Weather Company Trust Center

Published June 24, 2026

We're excited to welcome you to The Weather Company Trust Center. This is your central destination for transparency into how we protect your data and operate our services. Here you'll find our security and compliance documentation, certifications, privacy resources, and our current list of subprocessors.

Thank you for your continued trust in The Weather Company.
