SOC 2 Type 2 Security Compliance

1. Commitment

Vretta considers the security, availability, processing integrity, confidentiality, and privacy of customer data our top priority. Our commitment to achieving and maintaining SOC 2 Type 2 compliance reflects our dedication to implementing a robust security framework that aligns with the System and Organization Controls (SOC) framework defined by the American Institute of Certified Public Accountants (AICPA).

SOC 2 Type 2 compliance ensures that Vretta’s technology systems are designed to safeguard customer data through a rigorous control framework. Since 2021, Vretta has successfully passed SOC 2 Type 2 audits annually, demonstrating our ongoing commitment to maintaining the highest industry standards.

Ensuring Compliance with SOC 2 Type 2:

• Security: Protecting systems and data against unauthorized access and threats.
• Availability: Ensuring services and systems remain operational and accessible.
• Processing Integrity: Guaranteeing accurate and reliable system processing.
• Confidentiality: Safeguarding sensitive business and customer data.
• Privacy: Handling personal information in accordance with strict privacy principles and regulations.

2. SOC 2 Type 2 Compliance Controls

To uphold SOC 2 Type 2 compliance, Vretta follows a structured approach that includes continuous security monitoring, access controls, data protection measures, and periodic audits. By fostering a security-first culture, we ensure our compliance efforts align with industry best practices and evolving regulatory expectations.