Josef becomes SOC 2 certified!

Josef is now SOC 2 Type II certified!

It’s with great pleasure that we at Josef announce our sparkly, new SOC 2 certification!

Following extensive monitoring by our auditors, Josef now adds SOC 2 Type II to its list of security standards.

Achieving such a milestone takes a village and, in Josef’s case, Head of Legal & Data Security Prue Burns, COO Sam Flynn and Co-founder and Solutions Architect Kirill Kliavin.

Together, the team reflect on what SOC 2 means for Josef and its impact on customers now and in the near future.

What is SOC 2?

For those who are unfamiliar, Prue notes, “SOC 2 is a voluntary compliance standard that provides a clear framework for how organizations should manage customer data.”

And for the most part, it’s about trust.

“Being SOC 2 certified means that our customers can trust that Josef has strong, internationally recognized, measures in place that protect both our data and our customers’ data.”

“It helps us demonstrate our security, availability, processing integrity, confidentiality and privacy”.

Kirill echoes Prue, noting how, “achieving the certification isn’t just about ticking boxes; it’s about ensuring that our customers can rely on us to protect their data.”

Why SOC 2?

Sam says, “SOC 2 is one of the most respected security standards in the world, particularly where I’m based in the US. Importantly for us, it also has a laser focus on the things that we at Josef and our customers really care about: keeping data safe and secure.”

SOC 2 not only demonstrates Josef’s safe product offering but it enables more efficient operations, company-wide.

“When evaluating technology vendors, data security is high on everybody’s agenda,” says Prue. “By attaining SOC 2, we can now efficiently communicate to current and future customers what we’ve always known – that Josef’s data security controls are robust and meet high industry standards.”

“Our champions and customers will spend less time on long information security processes and more time building tools on Josef!”

The path to SOC 2

“Maintaining data security and compliance has always been a team effort at Josef,” says Prue. “In seeking SOC 2, we didn’t just implement strong technical controls or implement process around the product. We shared knowledge and everyone on the team is trained so that we all understand the important role we each play in keeping Josef and our customers’ data safe.”

“Kudos to everyone on the Josef SOC 2 project! The magic ingredient in achieving this milestone was the motivated and collaborative team who turned up to each weekly meeting with completed actions and clear views of the next steps.”

Future security measures

Maintaining data security at Josef will never simply be “set and forget”.

As Prue confirms, “There’ll be continuous monitoring, scanning, policy reviews and ongoing risk management to maintain and improve the controls we have in place.”

Josef will be “keeping a close eye” and working towards other international standards in the near future.

“Looking ahead, we have ISO27001 certification in our sights and will be keeping on top of new risks and new opportunities in data security as they emerge.”