Compliance Documents

Note: Usage of “we”, “us”, and “our” indicates Winter International LLC – Bloom. Usage of “you” and “yours” indicates current, former and potential users of our services and visitors to our websites.

SOC Compliance

We have successfully completed our SOC 2 Type 1 examination, evaluating the design and suitability of our security controls.

We are currently in the observation period for our SOC 2 Type 2 evaluation, with full report issuance targeted for Q1 2027. Qualified prospects and customers may request access to our SOC 2 Type 1 report or executive summary by contacting compliance@bloomgrowth.com.

PCI Compliance

Bloom Growth processes payments using Stripe alongside Nelnet Payment Services.

Primary payment processing is managed through Stripe using secure payment flows, ensuring sensitive payment card data never enters, processes through, or stores on Bloom Growth infrastructure.

You can download our Nelnet Certificate of Completion or visit Nelnet’s PCI Compliance page for more information.

Amazon Web Service Compliance

Looking for Amazon’s SOC reports? AWS Artifact is a no cost, self-service portal for on-demand access to AWS’ compliance reports.