The journey to becoming SOC 2 Type II compliant started back in March 2022, when CrowdComms was awarded Information Security Certification ISO27001:2013 by the British Standards Institute (BSI), recognising its commitment to the highest data security standards.
By February 2023, CrowdComms had successfully completed the System and Organization Controls (SOC) 2 Type I examination. Seven months later, CrowdComms is delighted to announce that it has taken this to the next level, having completed the SOC 2 Type II examination. Developed by the American Institute of CPAs (AICPA), SOC 2 (System and Organization Controls) defines criteria for managing customer data based on five ‘trust service principles’ – security, availability, processing integrity, confidentiality and privacy.
It is imperative that all levels of CrowdComms’ Information Security are as robust as possible and access to clients’ data is tightly controlled. While the ISO27001 certification is there to reassure clients to a significant degree, CrowdComms was determined to take its security measures even further to demonstrate the security controls in place for its U.S. client base.
A SOC 2 examination provides organisations with a report on their internal controls and how they protect customer data and sensitive information. It is the standard for data security among digital companies in the United States.
In CrowdComms’ case, it partnered with Vanta, the leader in continuous compliance monitoring, to help it automate the collection of its audit evidence. Vanta provides the strongest security foundation to protect CrowdComms’ customer data.
“I am pleased to announce that CrowdComms has achieved SOC 2 Type II. This compliance provides further reassurance to our clients all over the world, who use our event platform daily, that we are committed to ensuring the security of our product.
We’ve been assessed over an audit period of one year to ensure we meet the required security controls, and we couldn’t have achieved this without our security partner Vanta. This software helped us to deliver this project on time and to budget.”
– Donna Fielding, Information Security Manager, CrowdComms