about inriver

Service and Organization Controls (SOC) 2 is an auditing procedure highly adopted by cloud-based service providers by the American Institute of Certified Public Accountants (AICPA). This ensures a standard degree of security control in areas including organization and management, communications, risk management, monitoring of controls, and more.

SOC 2 Type 2 compliance is established to help mitigate the ongoing security challenges organizations face. Unlike SOC 2 Type 1 which focuses on a point-in-time review, SOC 2 Type 2 reports on the effectiveness of a service organization’s controls over a defined period of time. Inriver received an unqualified report, indicating we were fully compliant (there were no exceptions or advisory comments) and this is the best level of report an organization can achieve.

The SOC 2 reports focus on controls addressed by five categories called Trust Service Criteria:

• Security - protects the system against unauthorized access, be it physical or logical 
• Availability - makes the system available for use as agreed upon in contracts with customers
• Processing Integrity - ensures the complete and timely processing of information
• Confidentiality - protects any information deemed confidential with appropriate controls
• Privacy - handles any personal information per your organization’s privacy notice

Meeting milestones like an unqualified SOC 2 Type 2 report are ongoing achievements inriver is committed to as a leading global SaaS organization. For more details on inriver’s SOC 2 Type 2 compliance, please read the post in the Community.