Compliance Documents

Note: Usage of “we”, “us”, and “our” indicates Winter International LLC – Bloom. Usage of “you” and “yours” indicates current, former and potential users of our services and visitors to our websites.

SOC Compliance

We have completed our SOC 2 Type 1 examination, evaluating the design and suitability of our security controls.

We are currently in the observation period for our SOC 2 Type 2 evaluation, with full report issuance targeted for Q1 2027. Qualified prospects and customers may request access to our SOC 2 Type 1 report by visiting https://trust.bloomgrowth.com.

PCI Compliance

Bloom Growth processes payments using Stripe alongside Nelnet Payment Services.

Primary payment processing is managed through Stripe using secure payment flows, ensuring sensitive payment card data never enters, processes through, or stores on Bloom Growth infrastructure.

You can download our Nelnet Certificate of Completion or visit Nelnet’s PCI Compliance page for more information.

Amazon Web Service Compliance

AWS Artifact is a self-service portal for access to AWS’ compliance reports.