Compliance Documents

Note: Usage of “we”, “us”, and “our” indicates Winter International LLC – Bloom. Usage of “you” and “yours” indicates current, former and potential users of our services and visitors to our websites.

SOC Compliance

We are actively working toward SOC 2 compliance. Our SOC 2 Type 1 evaluation is underway, and we are progressing toward full SOC 2 Type 2 compliance with an estimated completion target of Q1 2027.

For security inquiries, please contact us at compliance@bloomgrowth.com.

PCI Compliance

We work directly with Nelnet Payment Services (formerly Paymentspring) to maintain PCI compliance. You can download our Certificate of Completion or visit Nelnet’s PCI Compliance page for more information.

Amazon Web Service Compliance

Looking for Amazon’s SOC reports? AWS Artifact is a no cost, self-service portal for on-demand access to AWS’ compliance reports.

Google Compliance

Find Google’s Compliance documentation at their Businesses and Data portal for more information.