Firmana is SOC 2 Type II certified, demonstrating our commitment to maintaining the highest standards of security, availability, and confidentiality for our customers' data.
What is SOC 2?
Industry Standard
SOC 2 is an auditing standard developed by the AICPA for service organizations that store customer data in the cloud.
Independent Verification
Third-party auditors verify that our controls are properly designed and operating effectively over time.
Type II Certification
Type II reports test the operational effectiveness of controls over a period of time, not just their design.
Annual Audits
We undergo rigorous annual audits to maintain our certification and demonstrate continuous compliance.
SOC 2 Trust Service Criteria
Security
Controls to protect against unauthorized access, both physical and logical. This includes access controls, network security, and data protection measures.
Availability
Controls to ensure systems and data are available for operation and use as committed or agreed. This includes monitoring, incident response, and disaster recovery.
Confidentiality
Controls to ensure information designated as confidential is protected as committed or agreed. This includes data classification and handling procedures.
Processing Integrity
Controls to ensure system processing is complete, valid, accurate, timely, and authorized. This includes data validation and error handling.
Privacy
Controls to ensure personal information is collected, used, retained, disclosed, and disposed of in accordance with privacy commitments.
What SOC 2 Means for You
Due Diligence Confidence
Our SOC 2 certification provides assurance during vendor risk assessments and due diligence processes.
Regulatory Compliance
SOC 2 compliance helps you meet your own regulatory requirements when using cloud services.
Risk Mitigation
Independent verification of our controls reduces your risk when storing sensitive data with Firmana.
Trust and Transparency
Demonstrates our commitment to security and provides transparency into our operational controls.
SOC 2 compliance is not a one-time achievement. We continuously monitor and improve our controls to maintain the highest security standards and adapt to evolving threats.
Our SOC 2 certification means you can trust Firmana with your most sensitive business data, knowing that independent auditors have verified our security controls and operational procedures.