SOC2, or Service Organization Control 2, is a standard developed by the American Institute of CPAs (AICPA). It's designed to assure that service providers manage and secure customer data to protect its privacy and confidentiality. The SOC2 reports focus on five trust service principles: security, availability, processing integrity, confidentiality, and privacy.

ISO27001 is an international standard issued by the International Organization for Standardization (ISO) that provides a framework for information security management systems (ISMS). It helps organizations manage and protect their information assets by addressing people, processes, and technology. The standard encompasses risk management processes, policies, and audits, and ensures the confidentiality, integrity, and availability of information.

Certified: Until September 2024

The General Data Protection Regulation (GDPR) is a regulation enacted by the European Union (EU) to protect the privacy and personal data of its citizens. It applies to all EU member states and any organizations worldwide that process personal data of EU citizens. The regulation emphasizes transparency, security and accountability by data controllers, while giving individuals greater control over their personal data, including rights to access, correct, delete, and transfer their information.