Skip to contentjump to list
  • ← Changelog

    Campsite is SOC2 Type II compliant

    June 20, 2023
    Feature image for Campsite is SOC2 Type II compliant

    Today we are proud to announce our SOC 2 Type II certification. This comes after an audit of how we work and manage customer data.

    We believe strongly in protecting your team’s data; our new SOC 2 Type II Certification is proof that we use industry best practices to keep your work private and secure.

    As a Campsite customer, you can request a copy of our report anytime by emailing us at security@campsite.design.

    What is SOC 2?

    A SOC (System and Organization Controls) certification is a report issued by an independent auditing firm, demonstrating that an organization has effective controls for the security, availability, processing integrity, confidentiality, and privacy of customer data. SOC certifications are standard in SaaS to assure customers that appropriate safeguards are in place.

    Several types of SOC certifications are designed to address specific needs and requirements. The most common types are:

    1. SOC 1: This is focused on controls related to financial reporting. They are typically requested by organizations that outsource financial processes or have an impact on their client's financial statements.
    2. SOC 2: This evaluates controls related to security, availability, processing integrity, confidentiality, and privacy (referred to as the Trust Services Criteria). These reports are broader in scope than SOC 1 and are often requested by organizations that rely on service providers to store or process their data.

    There’s also SOC 3 (SOC 2 but for public distribution) and SOC for Cybersecurity.

    SOC 2 certifications come in 2 types: Type I and Type II:

    1. SOC 2 Type I: This report evaluates the design and implementation of an organization's controls at a specific time. It provides a snapshot of the controls in place and examines whether they are suitably designed to meet the relevant Trust Services Criteria.
    2. SOC 2 Type II: This report goes beyond the design and implementation of controls to assess their operational effectiveness over a defined period. They are generally considered more valuable because they demonstrate the organization's commitment to maintaining effective controls consistently.

    As of today, Campsite is SOC 2 Type II certified.

    Why do it?

    The most significant benefit is that we now have a certificate showing a trusted auditor validated that we follow industry best practices. The certificate saves everyone time when customers evaluate if Campsite should be entrusted with their data. Now we simply refer to the SOC 2 Type II certification as proof.

    We could have just met the bare minimum to get the certificate. But at Campsite, we went the extra mile to ensure you can secure your data even further with two-factor authentication and SSO. We will continue investing in privacy & security so that you never have to worry about the integrity of your data on Campsite.