We're pursuing SOC 2 Type II certification to provide independent assurance of our security and confidentiality controls.
Understanding the certification we're pursuing.
SOC 2 (System and Organization Controls 2) is a widely recognized auditing standard developed by the American Institute of CPAs (AICPA). It evaluates how service organizations manage customer data based on five Trust Service Criteria.
A Type II report evaluates the design and operating effectiveness of controls over a period of time (typically 6-12 months), providing stronger assurance than a Type I report which only evaluates design at a point in time.
Our journey to SOC 2 Type II certification.
60% complete
Key security and confidentiality controls in our SOC 2 scope.
Available documentation while SOC 2 certification is in progress.
While we work toward SOC 2 Type II certification, we're committed to being transparent about our security practices. We're happy to share available documentation with prospective and current customers upon request.
Common questions about our SOC 2 certification.
Type II provides stronger assurance by testing controls over a period of time (6-12 months) rather than just at a single point. While it takes longer to achieve, it's more valuable to customers evaluating our security posture.
We're initially pursuing Security and Confidentiality criteria, which are most relevant for a SaaS application handling customer data. We may expand to include Availability in future audits.
We are currently in the process of selecting an AICPA-accredited CPA firm to conduct our audit. We expect to finalize engagement in Q2 2026. The auditor name will be disclosed in our SOC 2 report.
Yes. SOC 2 Type II reports are shared under NDA with customers and prospective customers. We will also produce a SOC 3 report which is publicly available. Contact to request access once available.
ISO 27001 certification is on our roadmap for Q4 2026. Many of the controls we're implementing for SOC 2 also align with ISO 27001 requirements, which will accelerate that certification.
Subscribe to receive updates when we achieve SOC 2 certification and other security milestones.
We'll only send SOC 2 and major security updates. No spam.