UserGuiding achieved SOC 2 Type 2 certification, confirming that our operational effectiveness and system controls meet the trust services criteria for security, confidentiality, availability, processing integrity, and privacy over a period of time.
What is SOC 2 Type 2 Certification?
SOC 2 Type 2 certification is awarded to organizations that demonstrate their controls are not only suitably designed but also operate effectively over a specified period, usually between six months to a year. For UserGuiding, this certification verifies that our system’s operational controls consistently adhere to the standards for:
- Security
- Confidentiality
- Availability
- Privacy
- Processing Integrity
How SOC 2 Type 2 is Different from SOC 2 Type 1
Duration of Assessment
SOC 2 Type 1: Evaluates the design and implementation of an organization’s controls at a specific point in time.
SOC 2 Type 2: Assesses the operating effectiveness of these controls over a continuous period.
Scope of Audit
SOC 2 Type 1: Focuses on the suitability of the design of controls at a single point in time.
SOC 2 Type 2: Examines controls' design and operational effectiveness over time.
Level of Assurance
SOC 2 Type 1: Provides a snapshot of the controls’ design.
SOC 2 Type 2: Offers a higher level of assurance by validating controls' continuous and effective operation.
Why It Matters
This certification ensures that our controls are designed to protect against unauthorized access, ensure the confidentiality of sensitive information, maintain system availability, and operate effectively over time. It demonstrates our ongoing commitment to maintaining high data security and operational reliability standards.
More Information
For detailed information about our SOC 2 Type 2 certification and report, visit our Trust Center.