SOC 2 Type II Compliance
Security is not a feature we charge extra for. It's the foundation of everything we build.
Auth247.net undergoes annual SOC 2 Type II audits performed by an independent CPA firm. Our audit covers the full AICPA Trust Services Criteria, demonstrating that our controls are not just designed well — they operate effectively over time.
Our SOC 2 report is available to customers under NDA. Enterprise customers can request the report through their account manager or by contacting security@auth247.net.
Trust Services Criteria
Security
Data is protected against unauthorized access, both logical and physical. Encryption in transit (TLS 1.3) and at rest (AES-256), with managed key rotation.
Availability
The platform remains accessible and usable as committed. 99.99% uptime SLA with multi-region failover and automated disaster recovery.
Processing Integrity
System processing is complete, valid, accurate, and authorized. Every authentication event is logged with an immutable audit trail.
Confidentiality
Information designated as confidential is protected. Strict access controls, role-based permissions, and zero-trust architecture.
Key controls
Annual third-party penetration testing
Continuous security monitoring and alerting
Formal incident response procedures
Background checks for all employees
Encryption of all data in transit and at rest
Quarterly access reviews and least-privilege model
Immutable audit logs retained for 12 months
Disaster recovery with RTO of 1 hour