Certification shows our commitment to the best-in-practice security and compliance
That’s the case for our recent completion of Service Organization Control (SOC) 2 Type II certification. SOC 2 is an auditing standard developed by the American Institute of Certified Public Accounts (AICPA).
Completing this audit successfully demonstrates our focus on and proven capabilities for security and compliance, and we hope will serve as a reminder to our clients that we have every protocol and guardrail in place to safely store and protect their data.
SOC 2 defines criteria for managing customer data based on five “trust service principles.” They are: security, availability, processing integrity, confidentiality and privacy. The certification process is meant to show a company’s ability to implement critical security policies and to demonstrate compliance over an extended period of time.
The SOC 2 Type II audit must be performed by an accredited CPA firm, whose job is to verify that safeguards are in place to protect customer data and that these safeguards are up and running effectively.
Many organizations likely have never heard of a SOC 2 audit, but anyone working in government technology knows its importance. It’s kind of like “inside baseball” or one of those “how we make the sausage” things. It matters to us, because we always want to go above and beyond what is expected. We love the security of knowing that, as we grow and expand our footprint, we are taking every measure to do so in a way that is thoughtful, safe, and the best for our clients.