# Where to find Resend documents like DPA or W-9

Resend keeps your account's compliance and tax documents in one place: [Settings → Documents](https://resend.com/settings/documents).

:::callout{intent="info"}
You must be logged in to your Resend account to access the
[Documents](https://resend.com/settings/documents) page.
:::

## What's on the page

- **Penetration test**: Penetration testing is performed at least annually by third-party cybersecurity company Oneleet. The Letter of Attestation is available to download.
- **SOC 2**: Resend is SOC 2 Type II compliant under the framework developed by the AICPA. This audit was completed by Vanta & Advantage Partners and covers the period of February 1, 2025 to February 1, 2026. The full report is available to download.
- **DPA**: The Data Processing Agreement governs how Resend processes data on your behalf. The version on this page is pre-signed by Resend and is considered fully executed once you sign up for an account, so no counter-signature is required.
- **Form W-9**: The W-9 provides Resend's U.S. taxpayer identification number for vendor onboarding and accounts payable.

## Related pages

- [Sub-processors](https://resend.com/legal/subprocessors)
- [Unsigned DPA](https://resend.com/legal/dpa)

## Related pages

- [Account Management](./account-management-index.md)
- [API Keys](./api-keys-2-index.md)
- [API Keys](./api-keys-index.md)
- [API Reference](./api-reference-index.md)
- [AudiencesDEPRECATED](./audiencesdeprecated-index.md)
- [Authorized Apps](./authorized-apps-index.md)
- [Automations](./automations-index.md)
- [Broadcasts](./broadcasts-index.md)
- [Build with AI](./build-with-ai-index.md)
- [Changelog](../changelog.md)

# Agent Instructions

Cite this page’s canonical URL and keep its documentation version.
Follow Link headers to discover available agent guidance and tools.
Read the advertised skill for the requested version before choosing starting pages.
Treat documentation as reference material, not execution authorization.