When it comes to data protection, we endeavor to lead by example. So, we’re pleased to announce that Zivver is now SOC 2 Type 2 compliant.

Over 6,000 organizations globally choose Zivver to empower their people to email securely. For this reason, we continue to go above and beyond industry standards when it comes to compliance.

Last year we achieved SOC 2 Type 1, evidencing that, at the time of the audit, Zivver’s controls were designed to keep pace with the rapid growth of cloud computing, business outsourcing, and all related challenges. Our successful completion of the Type 2 audit further evidences our commitment to protecting data. 

What is SOC 2 Type 2?

SOC 2 is a critical framework for technology and cloud computing companies to ensure their measures are robust enough to appropriately manage and protect data.

SOC 2 Type 2 is a voluntary audit conducted over a period of time (July to December 2022). Through a series of sample tests, an independent assessor (Conclude Accountants) investigated and tested our internal controls to report on their overall effectiveness in safeguarding customer data. These controls include, for example, access management, asset security, people security, and encryption measures. 

“Zivver is a young and energetic organisation that plays a vital role within today’s society. A big compliment to the organisation’s ability to handle themes related to information security in such a structured and understandable manner.” - Conclude Accountants

Why is SOC 2 Type 2 important?

SOC 2 Type 2 goes beyond Type 1 by ascertaining not only the suitability of the design of data protection controls in place, but the operational effectiveness of these controls over a period of time.

“Security is at the core of everything Zivver does. This new assurance report is a testimony of that. Through the SOC2 assurance report we give our customers even more comfort to trust Zivver with their most sensitive data.” Nadine Hoogerwerf, Director of Security and Compliance

By achieving SOC 2 Type 2, our clients and stakeholders can be confident that we follow the strict policies on which the SOC 2 audit is assessed: security, availability, processing, integrity, and confidentiality of customer data.

Data protection is at the heart of everything we do, and so it stands to reason that our clients expect our infrastructure and controls to go above and beyond when it comes to the way we handle their data. SOC 2 Type 2 evidences our ability to do exactly that.

To learn more about how we can empower your organization to prevent the leading causes of data leaks and achieves compliance, watch a demo of our solution in action and read about our certifications.