We’re excited to announce a major milestone for Control D: we’re now officially SOC 2 Type II compliant!
This achievement reflects our long-standing commitment to safeguarding user data and building a privacy-first product that people trust, not just because we say so, but because independent auditors verify it.
What Is SOC 2 Type II?
SOC 2 (System and Organization Controls 2) is a rigorous framework developed by the American Institute of CPAs (AICPA). It's the gold standard for operational security, based on independent third-party auditing over a period of time, and it evaluates how well an organization manages data based on the five Trust Services Criteria:
- 🔒 Security – Control D's infrastructure is protected against unauthorized access, threats, and vulnerabilities by design and by operation.
- 📈 Availability – Control D's systems are monitored and maintained to ensure they're reliable and perform consistently, so you can count on Control D when you need it.
- 🔍 Confidentiality – Sensitive data is handled with strict access controls, encryption, and retention policies that minimize exposure.
- 🛡️ Privacy – Control D collects and processes personal information responsibly. Our policies and systems are designed to minimize data collection, honor user intent, and process information in a way that’s transparent and ethical.
- 🧾 Processing Integrity – Control D performs its functions accurately, on time, and as intended – without manipulation, tampering, or errors.
Why This Matters
SOC 2 Type II isn’t a checkbox; it’s proof that our systems, processes, and people consistently meet some of the most respected security and privacy standards in the industry.
For you – whether you’re a parent, school, enterprise, or privacy-conscious user – this means:
- Peace of mind about how your data is handled
- Assurance that the platform is monitored, tested, and managed properly
- Confidence that we’re serious about protecting what matters
What’s Next?
Security and privacy are never “done”, meaning SOC 2 Type II compliance is just a milestone, not a finish line.
We’ll continue to invest in best practices, improve our controls, and hold ourselves to the highest possible standard.
Thanks to our incredible team for making this happen, and to our users and partners for placing your trust in Control D.
