Announcing Dreamdata’s SOC2 certification!

We’re pleased to announce that Dreamdata is now SOC2 Type I certified!

As a B2B go-to-market data platform, data security has always been one of our chief concerns. We make a big deal about having trust in the data - which also includes trusting us in handling customers’ go-to-market data.

Our SOC2 certification helps us prove how committed we are to handling data responsibly and securely.

Ole Dallerup, Dreamdata CTO and co-founder, added “we’re extremely happy to have obtained the SOC2 certification. We take the responsibility of handling our customer’s data very seriously, and this industry-leading certification recognises our commitment to this.” 

What is SOC2 certification?

In short: SOC2 certification means that an external auditor has assessed Dreamdata’s infrastructure and security controls that meet the AICPA criteria.

SOC2 Type I is an audit process that assesses a service organisation’s security, availability, processing integrity, confidentiality and/or privacy controls against the American Institute of Certified Public Accountants’ (AICPA) Trust Services Criteria, in accordance with SSAE 18.

With the help of Tugboat Logic, Dreamdata has worked through the elements of the SOC2 audit process for the Security Category of Trust Services Criteria.

The Security Category deals with security controls to protect against, amongst other things, unauthorized access, use, disclosure, or modification of information. These organisation-wise security controls range from risk-mitigating and monitoring solutions.

You can read more about SOC 2 here.

Why is SOC2 important for me as a Dreamdata customer?

As we mentioned above, SOC2 certification means that an external auditor has now been deemed Dreamdata to have all the security controls in place to meet the AICPA’s criteria.

In practice, you as a Dreamdata customer, will not notice any changes. After all, we’ve always operated with a data-security-first approach. What you will gain with this certification is the knowledge that an external assessor has confirmed that everything is as it should be.

And… the opportunity to gaze at the SOC2 badge (we love badges)

What next: SOC2 Type II

Dreamdata will now continue working to the SOC2 standards and criteria, and in doing so move towards SOC2 Type II.

The main difference is that SOC2 Type I tests the controls at a given point in time, SOC2 Type II tests the same controls over a period of time.

Watch this space! 👀