Security docs for procurement, SOC 2 compliance

Security Documentation Package (Updated: December 2025):

Compliance Certifications:

CertificationReport PeriodAudit FirmValid ThroughAccess MethodSOC 2 Type IIJan 2025 - Dec 2025Deloitte & Touche LLPMarch 2026Request via sales team with executed NDAISO 27001Ongoing certificationBSI GroupAugust 2026Certificate available publicly on our security pageGDPR ComplianceOngoingInternal + Legal reviewContinuousData Processing Agreement template available

Security Documentation:

• Security Architecture Whitepaper: Version 3.2, updated November 2025, covers infrastructure security, data protection, access controls - Available via security portal
• Penetration Testing Report: Conducted October 2025 by Rapid7, executive summary available, no critical vulnerabilities - Request via sales team
• Data Processing Agreement: GDPR-compliant template v2.1, includes data residency options, customizable for specific requirements - Available immediately
• Security Questionnaire Responses: Pre-completed for CAIQ, SIG, and custom security assessments - Available within 24 hours

Procurement Support Checklist:

• ✓ SOC 2 Type II Report: Current report available under NDA, covers all security controls
• ✓ ISO 27001 Certificate: Valid through August 2026, publicly verifiable
• ✓ Security Architecture Documentation: Comprehensive whitepaper available, technical deep-dive available
• ✓ Incident Response Plan: Summary available, detailed plan under NDA
• ✓ Business Continuity Plan: Executive summary available, full plan under NDA
• ✓ Vendor Risk Assessment: Our internal security practices documentation

Procurement Timeline:

• Initial Security Review: Standard documentation package delivered within 2 business days
• Custom Requirements: Specific security questions answered within 5 business days
• Legal Review Support: Security terms negotiation support available throughout process