SOC 2 Type II
Independently audited for security, availability and confidentiality.
- Report
- SOC 2 Type II
- Issued by
- An independent CPA firm
- Criteria
- Security, availability and confidentiality
- Access
- Under NDA, for customers and prospective customers
An independent CPA firm has issued a SOC 2 Type II report on the design and operating effectiveness of our controls, for the security, availability and confidentiality trust service criteria.
What a Type II report shows
A Type II report looks at more than whether controls exist on paper. It examines whether they were designed well and whether they operated effectively in practice. For the teams who bring us their most sensitive work, that is the question that matters: not what we say we do, but what an independent auditor saw us do.
The report covers three of the trust service criteria: security, availability and confidentiality. Together they describe how we protect the systems and information we work with, and how we keep them available to the people who rely on them.
How it fits with the rest of our security
The report sits alongside our ISO/IEC 27001:2022 certification, which covers our information security management with forward deployed engineering in scope. They answer different questions: one is an independent report on how our controls work, the other a certified management system.
Neither replaces the terms of a specific engagement. Data handling, processing agreements, controls, incident response and audit access are agreed and written into each deployment plan.
How to see it
The report is available under NDA to customers and prospective customers. Ask for it as part of your security review, and start with our security page for an overview of how we work.