Feedback Solutions is pleased to share that we have completed our System and Organization Controls (SOC) 2 Type II audit.

An Independent, Industry-Standard Audit

SOC 2 is one of the most widely recognized standards for information security. It was developed by the American Institute of CPAs (AICPA) to allow an independent third-party auditor to examine a service organization’s internal controls over information security and report on whether those controls operated effectively.

A Type II audit goes further than a Type I. Rather than assessing how controls are designed at a single point in time, it tests whether they actually operated as described across the full audit period.

We obtained our audited SOC 2 report by partnering with Johanson Group LLP, who reviewed our internal controls including policies, procedures, and infrastructure covering data security, network and firewall configuration, change management, logical access, backup management, business continuity and disaster recovery, security incident response, and other critical areas of our business.

Our audit covered all five Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. Many SOC 2 examinations cover Security alone.

Ongoing Monitoring and Annual Re-Audit

A SOC 2 Type II report covers a defined audit period, so maintaining it is an ongoing commitment rather than a one-time exercise. We will continue working with the auditor on an annual basis, with each successive audit period testing our controls again over the following year.

Between audits, our controls are monitored continuously through our GRC platform, which tracks control status and evidence year-round rather than only during the audit window.

We believe the relationship with our customers must be built on trust. Completing our SOC 2 report is one of the ways we work to earn and keep it. SOC 2 is one part of a growing security program, and we are committed to continually improving it.

You can read more about our security practices on our Security page.