SOC 2 is an AICPA audit framework that evaluates a service organization’s controls against the Trust Services Criteria. "Type II" means those controls are assessed for operating effectiveness over a period of time, not just at a single point.
Our internal controls are organized around these criteria.
Protection against unauthorized access.
The service is operational and accessible as committed.
Processing is complete, valid and timely.
Confidential information is properly protected.
Personal data is handled per privacy criteria.
We design and operate the platform aligning our controls with the SOC 2 criteria: access management, encryption, logging and monitoring, change management, incident response and vendor assessment.
SOC 2 reports contain sensitive information about our controls, so they are shared under a non-disclosure agreement (NDA) with qualified customers and prospects on request.
Get in touch and we’ll coordinate NDA-gated access for your vendor assessment.