SOC 2 Compliance
InfraPrism has achieved SOC 2 Type II certification, demonstrating our commitment to security and operational excellence.
What is SOC 2?
SOC 2 (System and Organization Controls 2) is a compliance framework developed by the American Institute of CPAs (AICPA). It evaluates an organization's information systems relevant to security, availability, processing integrity, confidentiality, and privacy.
Type II certification means an independent auditor has verified that our controls are not only properly designed but have been operating effectively over a sustained period (typically 6-12 months).
Trust Service Criteria
Our SOC 2 report covers the following Trust Service Criteria:
Security
Protection against unauthorized access through access controls, network security, and encryption.
Availability
Systems are available for operation and use as committed in our SLA agreements.
Confidentiality
Information designated as confidential is protected as committed or agreed.
Privacy
Personal information is collected, used, retained, and disclosed in conformity with commitments.
Key Controls
Our SOC 2 certification includes verification of the following control areas:
Access Management
- Multi-factor authentication required for all internal systems
- Role-based access control with least-privilege principles
- Quarterly access reviews and prompt deprovisioning
- Unique credentials for all personnel
Infrastructure Security
- Encrypted data in transit (TLS 1.3) and at rest (AES-256)
- Network segmentation and firewall controls
- Regular vulnerability scanning and penetration testing
- Security patching within defined SLAs
Operational Security
- Security awareness training for all employees
- Incident response procedures and regular tabletop exercises
- Change management controls
- Continuous monitoring and alerting
Business Continuity
- Redundant infrastructure across multiple availability zones
- Regular backup testing and recovery procedures
- Documented disaster recovery plan
Request Our SOC 2 Report
Enterprise customers and prospects can request a copy of our SOC 2 Type II report under NDA. The report provides detailed information about our controls and the auditor's findings.
Request ReportQuestions about our compliance posture?
Our team is happy to discuss our security controls and certifications.