Security and trust at VIP Software
Independently audited. Our SOC 2 Type II report is available to customers and prospects under NDA.
Compliance
- SOC 2 Type II
- Audit period: [START DATE] to [END DATE]
- Independent auditor: Atom Assurance Services
- Trust Services Criteria: [Security, Availability, Confidentiality]
SOC 2 is an attestation report issued by an independent CPA firm under AICPA standards.
How we protect your data
Encryption
Customer data is encrypted in transit and at rest. Placeholder copy to be replaced with approved details.
Access control
Access to production systems is limited by role and reviewed regularly. Placeholder copy to be replaced with approved details.
Monitoring and logging
System activity is logged and monitored for unusual behavior. Placeholder copy to be replaced with approved details.
Vulnerability management
Systems are scanned and patched on a defined schedule. Placeholder copy to be replaced with approved details.
Backups and continuity
Data is backed up and recovery procedures are tested. Placeholder copy to be replaced with approved details.
Vendor risk management
Vendors that handle customer data are reviewed before and during use. Placeholder copy to be replaced with approved details.
Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| [Provider name] | [Purpose] | [Location] |
| [Provider name] | [Purpose] | [Location] |
| [Provider name] | [Purpose] | [Location] |