RedFlag is Now SOC 2 Type II Compliant, and What That Means for You

June 21, 2023 Posted by Pocketstop in Pockestop News, Location-Based Alerts, Mass Notification Social Share

Data security continues to be of critical importance. According to statistics from Surfshark, the United States experiences the most data breaches of any country. In 2021, 212.4 million users were affected (compared to 174.4 million in 2020).

As a provider of emergency notification and mass communication solutions, Pocketstop RedFlag is committed to ensuring the security and privacy of its customers’ data. That’s why we are proud to announce that we have recently successfully completed SOC 2 Type II audit.

What is SOC 2?

System and Organizational Controls (SOC) is a widely recognized auditing standard developed by the American Institute of CPAs (AICPA). While there are several types of SOC types, SOC 2 is designed to assess the effectiveness of a service organization’s controls over the Trust Services Criteria (TSC), which are a set of principles and criteria established by the AICPA to evaluate the security, availability, processing integrity, confidentiality, and privacy of its systems and data. 

There are two types of SOC 2 reports:

1. SOC 2 Type I: A Type I report evaluates the design of a service provider’s controls as of a specific point in time. It assesses whether the controls are suitably designed to meet the TSC criteria, but it does not test the operating effectiveness of those controls.
2. SOC 2 Type II: A Type II report evaluates the design and operating effectiveness of a service provider’s controls over a period of time (usually six to twelve months). This report not only evaluates whether the controls are suitably designed but also tests whether they are operating effectively over the period of the assessment.

The primary difference between SOC 2 Type I and Type II reports is that Type I assesses the design of controls at a specific point in time, while Type II evaluates the design and operating effectiveness of controls over a period of time.

“SOC 2 ensures service providers securely manage your data to protect the interests of your organization and the privacy of clients. For security-conscious businesses, SOC 2 compliance is a minimal requirement when considering a SaaS provider.” (Imperva)

Why SOC 2 Type II Matters

This milestone is important for Pocketstop RedFlag as it demonstrates our commitment to security and data protection. By achieving SOC 2 Type II compliance, we have undergone a rigorous third-party audit of our security controls and processes, which provides our customers with the assurance that their data is being handled securely and with the utmost care. Particularly for communication software, this data security is critical. 

Achieving SOC 2 Type II Compliance

To achieve compliance, we engaged a third-party auditor to perform an audit of our systems and processes. The audit covered all aspects of our operations, including:

• our infrastructure
• software development
• security policies and procedures
• data protection measures 

The audit process was thorough and required a significant amount of work from our team. However, we believe that the effort was well worth it. Achieving SOC 2 Type II certification is not only a validation of our commitment to security and data protection, but it also sets us apart from our competitors who may not have undergone the same level of scrutiny.

Looking to the Future

The SOC 2 Type II certification serves as a significant milestone for Pocketstop RedFlag, underscoring our unwavering dedication to safeguarding data and ensuring utmost security. It not only demonstrates our commitment to protecting sensitive information but also instills confidence in our customers regarding the secure handling of their data. We take great pride in this achievement and remain steadfast in our commitment to prioritizing data security and protection. As we move forward, we will continue to enhance our security measures, invest in cutting-edge technologies, and collaborate with industry experts to proactively address evolving data security challenges. Our ongoing efforts will ensure that we stay ahead of the curve and maintain the highest standards of data protection for our valued customers.

—

About Pocketstop

Pocketstop is a communication software solutions company who empowers companies to create personalized, automated messages designed to provide rapid ROI, backed by the industry’s best support at a cost customers can afford. For more information, visit https://pocketstop.com

 

See More Details by Scheduling a Custom Demo Now

---

  Social Share