Every control, evidenced and continuously monitored.
This is where your security team starts. Get our System and Organization Controls (SOC) 2 reports, review the controls we run across access, network, and incident response, and see how they're monitored, continuously, not once a year.
Attestations, ready to share.
Both reports are current. The Type 1 letter of attestation is available to download now; the Type 2 report ships through the trust portal after a mutual NDA.
SOC 2 Type 1
AttestedAn independent attestation that our controls are suitably designed at a point in time, issued by our auditor.
SOC 2 Type 2
Report on requestThe full report on the operating effectiveness of our controls over the reporting period. Available under NDA.
Controls that are checked every day, not once a year.
Change Management
6 controls- Baseline configurations for production infrastructure
- Change Management Policy
- Segregation of dev, staging & production
Availability
4 controls- Uptime and availability monitoring
- Business Continuity & Disaster Recovery Policy
- Annual backup restoration testing
Organizational Management
17 controls- Continuous internal control monitoring
- Cybersecurity insurance
- Background checks & security awareness training
Confidentiality
3 controls- Data Classification Policy
- Retention of customer data
- Data Retention & Disposal Policy
Vulnerability Management
1 control- Vulnerability & Patch Management Policy
Incident Response
4 controls- Incident Response Plan & testing
- Lessons-learned after resolution
- Incident tracking & analysis
Risk Assessment
5 controls- Maintained risk register
- Risk Assessment & Treatment Policy
- Vendor Risk Management Policy
Network Security
3 controls- Managed endpoint security
- Automated alerting for security events
- Network Security Policy
Access Security
11 controls- Encryption in transit & at rest
- Complex passwords & unique access IDs
- Least-privilege admin access
Physical Security
1 control- Physical Security Policy
Communications
5 controls- Published Terms of Service & Privacy Policy
- Security commitments communicated externally
- Confidential reporting channel
All controls, live
Every control above is monitored continuously. Browse the complete, always-current list in the trust portal.
Open the trust portalHow to get the Type 2 report.
Sign a mutual NDA
We'll send the template. Most teams turn it around same-day.
Pick a period
Tell us which version: current reporting period or prior period.
Get the report
Delivered via the trust center portal within 1 business day.
Bring your security team.
We'll walk through our SOC 2 report, the control library, and the audit-log story, and answer the questions you'd usually save for procurement.