Solutions
What does SOC 2® certification mean?
What are the impacts of SOC 2® for Oplit's customers?
Although Oplit is "security by design" regarding data, we wanted to submit our security and data-management practices to external experts in order to meet the strictest standards.
Eager to have its customers operate in secure environments, Oplit obtained its SOC2 certification in April.
Although Oplit is "security by design" regarding data, we wanted to submit our security and data-management practices to external experts in order to meet the strictest standards.
SOC 2®, developed by the American Institute of Certified Public Accountants (AICPA), is an audit procedure aimed at guaranteeing that organizations like ours manage data in a safe and secure way.
The objective is to determine whether the internal controls put in place to protect customer data are sufficient and properly designed, by verifying whether they meet the required trust-service criteria.
To obtain this certification, we had to go through an audit carried out by a third-party auditor who verifies that the security controls are designed and applied appropriately throughout the audit period.
SOC 2 certification evaluates security standards according to the five basic principles named the "Trust Service Principles" (TSP) of the American Institute of CPAs.
The five TSPs evaluated during certification are security, availability, processing integrity, confidentiality, and privacy. The third-party assessors carry out two separate audits to verify compliance with SOC 2.
The SOC 2 Type 2 audit that Oplit went through evaluates operational effectiveness over a determined period of time, generally six to 12 months.
No major change within the platform, except on the side of the protocols for securing your data, the strengthening of which will be carried out continuously.
