Phocas SOC 2 Type 2 Compliance
Our ongoing commitment to data security
Phocas first completed a SOC 2 audit in 2021, as per standards defined by the American Institute of Certified Public Accountants (AICPA).
Since then, Phocas has completed external calendar-year audits every year. The most recent being the audit completion for SOC 2 Type 2 for the calendar year 2023. This reinforces an ongoing commitment to data security and continual improvement in our security stance for Phocas and our customers.
What does this mean for us and our customers?
Data is at the core of everything we do at Phocas, and we take information security and privacy extremely seriously. We hold ourselves to the highest standards when it comes to data protection and continuously work hard to ensure our systems and technology meet industry standards.
To achieve the SOC 2 Type 2 qualification, an independent examination was conducted by global cybersecurity auditing firm AssuranceLab who validated Phocas’ security practices and controls over an extended period (12 months).
Our ongoing commitment to security
SOC 2 demonstrates our strong commitment to security. As a customer, you gain the assurance that your data is protected and that our internal controls, policies, and procedures have been critically evaluated and match industry best practices.
We are committed to meeting the SOC 2 standards on an ongoing basis, striving for a yearly SOC 2 achievement.
Additionally, we continually train our people, review and implement processes and standards across all our business and customer-facing applications and platform.