We’re ecstatic to announce that we’ve been awarded SOC2 Type II certification! 

We achieved SOC2 Type I compliance in 2022, and have since committed to strengthening our approach to information security. This is an exciting milestone and a strong reinforcement of our commitment to the highest standards of security and compliance. 

For this, we collaborated with the independent cybersecurity and compliance audit organization Kompleye who completed a thorough examination of our systems and processes.

In this article, we’ll explore what this is, why it matters, and what comes next for us. 

What is SOC2 Type II? 

Developed by the American Institute of Certified Public Accountants (AICPA), the System and Organization Controls (SOC2) Type II, is a voluntary audit of a business's non-financial reporting controls.

SOC2 Type II builds on the principles of Type I, and evaluates an organization’s ability to manage data securely and uphold privacy and confidentiality. Achieving this certification requires a thorough independent audit spanning six months, examining a company’s adherence to stringent criteria that relate to security and operational processes.

What Does SOC2 Type II Mean for Us? 

Achieving SOC2 Type II certification means that our systems and processes have undergone rigorous testing, auditing, and evaluation by an accredited, independent third party, and the result is that we have entirely met all of the standards. 

It is often a prerequisite for business with public and regulated entities, and this rigorous assessment and audit enables us to identify, address vulnerabilities, and enhance our security framework, safeguarding sensitive data.

This underscores our commitment to the highest levels of security, and is shining recognition of the work that our development team has undertaken in the creation of our product. 

Why Does This Matter? 

SOC2 is considered a gold standard when it comes to information security, and we’re is proud to have attained this certification for the second year in a row. We recognize the importance of handling our customers’ data with the utmost care, and have invested significantly in building robust systems and processes that safeguard this information in the best ways possible. 

What’s more, by committing to independent audits on an annual basis, we ensure that these standards continue to be met — and this is something that we will carry forward indefinitely. 

When our valued customers choose us as a vendor or a partner for their onboarding, payroll, and benefits administration, we want them to feel confident that their information is safe, and the fact that we have received SOC2 certification without exception for the second year in a row is a significant contribution to that trust. 

What’s Next?

We never sleep! As a company, we’re continuously improving our product and our processes, and this applies to security and compliance as well. Over the coming year, we’ll continue to bolster our approach to information security, and feel confident that this will only double-down on our SOC2 compliance — and beyond! 

If you need help onboarding, paying, and managing your teams around the globe, book a demo today and learn how we can help take your remote team to the next level.