BackBox Achieves SOC 2 Type 2 Compliance for 2025

Created by the American Institute of Certified Public Accountants (AICPA), a SOC 2 Report verifies the outcomes of a thorough audit that emphasizes the controls at the system level responsible for processing data.

SOC 2 reports cover the design and documentation of controls and provide evidence of how the organization operated the documented controls over an extended period at a given point in time.

There are two different types of SOC 2 reports.

1. A SOC 2 Type 1 report describes a service provider’s systems and evaluates if the system is suitably designed to meet relevant trust principles.
2. A SOC 2 Type 2 report details the operational effectiveness of those systems and includes a historical element that shows how a business managed controls over time.

SOC 2 is neither a standard nor a requirement. For example, security standards like SOX, PDI DSS, or GDPR have specific requirements, while the policies, procedures, and technical controls of SOC 2 are distinct for each organization.

To achieve SOC Compliance, your organization must pass a third-party technical audit. This audit will verify whether your organization has created, documented, and followed the relevant policies and procedures.

BackBox is a network automation platform dedicated to building trust with our customers and partners by providing innovative technology and valuable insights in a thoughtful, ethical, and secure manner. We consistently and rigorously test our infrastructure and applications to identify and address vulnerabilities. Additionally, we collaborate with industry security teams and third-party specialists to protect our users and their data.

Contact us to view BackBox’s SOC 2 report created by Armanino. An NDA is required to review the SOC 2 Report.