SOC 2® Type II Compliance

To maintain high organizational and security standards, Creative Force partnered with A-LIGN, an independent CPA firm, to complete a SOC 2 assessment.

soc-2

What is SOC 2?

SOC stands for "system and organization controls." The controls are a set of standards for measuring just how well a company regulates and keeps its information safe. When engaging with third-party vendors, the SOC 2 certification may bring peace of mind that your company's data is safe and secure.

SOC 1, 2, and 3

SOC 1: These reports focus on the organization’s controls related to financial reporting.

SOC 2: These are more in-depth reports expanding on the financial reporting of SOC 1. They also require standard operating procedures for organizational oversight, vendor management, risk management, and regulatory oversight.

A SOC 2-certified service organization is for more advanced IT providers and SaaS (software as a service) companies, like Creative Force.

SOC 3: While it has the highest number, it's actually a simplified version of SOC 2 reports and requires less formalized documentation.

Type I and II

On top of the certification, there are also two 'types':

Type I: This is a report concerning policies and procedures at a specific moment. A snapshot of the company.

Type II: These are a little more in-depth, reporting policies and procedures over a specified time period. At a minimum, systems are evaluated for six months.

The Trust Services Principles

Finally, SOC 2 framework includes five specific criteria to focus on that include:

  • Security of the system
  • Processing integrity of the system
  • Availability of the system
  • Privacy of the system
  • Confidentiality of information processed

What does this mean for you?

It means that your sensitive data is safe with Creative Force. The SOC 2 Type II certification is the most comprehensive certification in the Systems and Organization Controls protocol.

One of the most essential pieces of receiving this SOC 2 Type II certification is the external approval of our internal procedures. Many talented employees perform high-quality work and compliance in their day-to-day operations to ensure that all of our client's data is safe. 

SOC 2 is helping our organization set and maintain incredibly high standards throughout our operations.

To learn more about our SOC 2 journey, click here.