{"id":4184,"date":"2023-06-13T10:13:17","date_gmt":"2023-06-13T10:13:17","guid":{"rendered":"https:\/\/gitprotect.io\/blog\/?p=4184"},"modified":"2024-05-20T12:58:43","modified_gmt":"2024-05-20T12:58:43","slug":"gitprotect-by-xopero-is-now-soc-2-type-ii-compliant","status":"publish","type":"post","link":"https:\/\/gitprotect.io\/blog\/gitprotect-by-xopero-is-now-soc-2-type-ii-compliant\/","title":{"rendered":"We got it… again! GitProtect By Xopero is SOC 2 Type II audited"},"content":{"rendered":"\n

Security is our DNA – we are keeping to repeat it and have already proven it many times. When you ran a backup and data protection company, your number one priority is to hold products, customers, teams, and processes according to the world-highest security standards. <\/p>\n\n\n\n\n\n\n\n

We are excited and proud to announce that for the second year in a row, on May 17th 2024, we completed the SOC 2 Type II report covering all principles of information security, which are: Security, Availability, Confidentiality, and Processing Integrity as well as all common COSO and information security criteria like e.g. Logical and Physical Access Controls, System Operations, Risk Mitigation, Change Management, and more.\u00a0<\/p>\n\n\n\n

Therefore, we are one of the few vendors on the backup market that has passed the two most important audits on the market – both SOC 2 Type II and ISO 27001. <\/a><\/p>\n\n\n\n

What is the SOC 2 Type II all about? <\/strong><\/h2>\n\n\n\n

In short: SOC 2 is the best way to prove that customers’ data and its protection is your top priority.<\/p>\n\n\n\n

Speaking officially, SOC stands for Service Organization Control. SOC 2 is a framework applicable to technology or SaaS companies that store customer data in the cloud. Developed by the American Institute of CPAs (AICPA), it defines criteria for managing customer data based on \u201ctrust service principles\u201d. <\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

However, controls and reports are unique to every business. Each company designs its own controls to comply with its Trust Services Criteria (TSC).<\/p>\n\n\n\n

In practice, SOC 2<\/strong> is an audit procedure that results in a report detailing how your service provider manages the data entrusted to it. <\/p>\n\n\n\n

SOC 2<\/strong> consists of two reports:<\/p>\n\n\n\n