Trippz is SOC 1 Type 2 and SOC 2 Type 2 certified
With the digitization of today's world, compliance with specific security standards is increasingly important
Trippz has a great portfolio of customers, some being publicly traded entities at US stock exchanges. As such, they have stiff compliance rules to adhere to. Amongst many, compliance with the Sarbanes-Oxley (SOX) Act is a big one.
๐ช๐ต๐ฎ๐ ๐ถ๐ ๐ฆ๐ข๐ซ? Publicly traded entities, subject to the Sarbanes-Oxley (SOX) Act, have a duty to ensure the accuracy and reliability of their financial reporting. This includes obtaining assurance from their suppliers, like Trippz, regarding their internal controls over financial reporting. Companies must evaluate and document the effectiveness of their suppliers' controls. This is typically done through a SOC 1 type 2 report.
SOC 1 Type 2 & SOC 2 Type 2 Next to a SOC 1 Type 2, many companies also have SOC 2 Type 2 certification. Where SOC 1 Type 2 focuses on financial reporting controls, SOC 2 Type 2 focuses on controls relevant to security, availability, processing integrity, confidentiality, and privacy. A SOC 2 Type 2 report includes a description of the service organization's systems and controls, and an assessment of the effectiveness of these controls over a defined period. This report is crucial for clients to understand how their data is being protected and managed, and it involves detailed testing of controls to ensure they are functioning as intended over time.
Trippz now has both certifications We are proud to announce that after receiving the SOC 1 Type 2 certification in 2023, since this year Trippz is also SOC 1 Type 2 certified.
What about GDPR? As a company, based in the Netherlands, we operate our services purely from within the EU. Our cloud-based servers are all EU-based and whatever data we need to store, we do it there. Although SOC2 has an extensive privacy-scope, it does not cover all aspects of the GDPR. As such, we made sure that on top of SOC2 we also comply with all regulations set within the GDPR framework.