RESOURCES
XMPie is enhancing personalization and cross-media data security
XMPie’s personalized communication and cross-media marketing solutions are built on robust, secure systems that feature end-to-end encryption, data protection, and compliance with data sovereignty requirements. These security capabilities are further enhanced by the successful completion of our SOC 2 examination, ensuring the highest standards of data security and privacy.
What is SOC 2 Examination?
SOC, which stands for System and Organizational Controls, is a framework developed by the American Institute of Certified Public Accountants (AICPA) for the purpose of providing regular, independent attestation of the controls that a company has implemented to mitigate information-related risk.
A SOC 2 report addresses risks associated with the handling and access of data, and can be used by a variety of organizations of any size (e.g. SaaS, colocation, data hosting, etc.). Different from a cybersecurity assessment that evaluates specific technical configurations, a SOC 2 report focuses more on how an organization implements and manages controls to mitigate the identified risks to the different parts of an organization.
The SOC 2 audit testing framework is based on the Trust Services Criteria (TSC), which are used to identify various risks (points of focus) an organization should consider addressing. Based on the TSCs the organization selects to be in scope, the third-party compliance and audit firm evaluates whether the organization has the appropriate policies, procedures, and controls in place to manage the identified risks effectively.
XMPie Customer Benefits
In order to pass a SOC 2 examination and receive a letter of attestation successfully, it means an organization is addressing controls in areas such as information security, access control, vendor management, system backup, business continuity and disaster relief, and more. The scope of a SOC 2 examination extends beyond the systems that have a financial impact, reaching all systems and tools used in support of the organization’s system or services. For XMPie customers this means enhancing security confidence via certified independent verification.
