Xensam Achieves SOC 2 Type 1 Audit Compliance

We are proud to announce that Xensam has successfully completed a SOC2 Type 1 audit. This is a critical milestone in our journey to becoming SOC2 compliant, and demonstrates our commitment to data security, transparency, and privacy for our customers.  

As a Software Asset Management (SAM) provider we understand that protecting data is a top priority. The Type 1 audit, conducted by AssuranceLab with the full collaboration of the Xensam team, assessed our controls against the Trust Services Criteria of Security, Confidentiality, Availability, and Privacy. 

What is SOC 2? 

Service Organization Control 2 (SOC 2) is a widely recognized framework established by the American Institute of Certified Public Accountants (AICPA) for evaluating the controls at a service organization relevant to security, availability, confidentiality, processing integrity, and privacy. Achieving SOC 2 compliance signifies that an independent auditor has examined a company’s controls and confirmed their effectiveness. This provides customers with an independent assurance of the security posture of software vendors, a critical step in managing third-party and supply chain risk.  

What is a SOC 2 Type 1 Audit? 

A SOC 2 Type 1 audit evaluates the design of an organization’s internal controls at a specific point in time. It confirms that the controls in place are suitably designed to meet the relevant Trust Services Criteria. This achievement will give customers greater confidence in the security of their data with Xensam by providing independent validation that we have implemented robust controls to protect your information. 

Looking Ahead: SOC 2 Type 2 Compliance

Work towards the SOC 2 Type 2 audit is well underway with the Xensam team and our audit partners. This audit will assess the operational effectiveness of our controls over a period of time. We are dedicated to maintaining high security standards that our users can trust, and we look forward to sharing updates on our progress towards SOC 2 compliance.