We’re incredibly proud to inform you that we’ve strengthened our commitment to your security by becoming SOC 2 Type 1 Compliant. Along with our current security policies, this recently granted certification is another representative of our continuous efforts to ensure our clients’ services and data safety. It’s been quite a journey for our company, and we want to share some of it with you.

What is the SOC 2 Type 1 Certification?

SOC 2 is globally recognized as the golden standard of security compliance in the industry. It’s a complicated auditing procedure that ensures data security and aims to protect software end-users and clients’ privacy and interests. Meeting all SOC 2 extremely harsh requirements is a priceless asset for software-as-a-service (SaaS) providers.

It’s credible proof of the high-security level of service. SOC 2 requires companies to thoroughly follow strict information security policies, equip all the employees with demanded information, skills, and security awareness, and finally, rigorously monitor any customer data’s security and confidentiality. To sum up, this certification is one of those undoubtedly worth having but extremely hard to get.

Our Journey

The challenge that we had faced last year was to enhance the security, implement all of the internal policies, and at the same time keep on developing the product and increasing its value for our users. We had to carefully orchestrate our activities and resources to reach both goals. We decided to use this opportunity of going through the SOC 2 audit to the fullest. We went way above and beyond what was required of us and, throughout the whole process,transformed our security, finance, legal, engineering, and human resources practices. This project has clearly affected the entire organization.

Getting this certification had several stages as it required the transformation of internal processes and documentation. It also involved internal training, building security awareness among all employees, not only engineers, conducting time-consuming risk and vendor assessments, and rethinking incident reaction policies. It was a challenging project, definitely a milestone, which took us almost a year to finalize. And we are proud of this accomplishment.

Why getting the SOC 2 is Important for Your Company?

Nowadays, for security-conscious businesses, SOC 2 compliance is a requirement when considering a SaaS provider. This independent validation of security protocols is crucial for customers in highly regulated industries, and lack of this certification could be a deal-breaker for many companies.

Moreover, speaking from our experience, getting into the whole process could prove beneficial to the entire company. It could be a unique opportunity to improve internal processes, quality of service, knowledge, and a trigger for the rise of the security culture.

So, what improvements did getting the SOC 2 envoke to our company?

• Growth of security-related knowledge and skill across the whole company
• Ensuring proactive, engaged attitude and high-security awareness among all employees
• Achieving internal transparency of policies, documentation, and workflows
• Establishing clear responsibilities and access rights structure
• Providing detailed vendor and risk assessment

More remarkably, from the product perspective, this process allowed us to offer an even more secure, stable, and reliable product to our demanding and well versed in security users and their customers.

Learn more about Termius security standards and request the SOC 2 Type 1 report here.