Security & data standard
SOC 2
Trust criteria for how you handle customer data.
Applies to: B2B SaaS and service providersWhat it is
SOC 2 is an audit framework from the AICPA that evaluates controls around security, availability, processing integrity, confidentiality, and privacy.
Type I reports a point in time. Type II reports operating effectiveness over a period.
Who must comply
- SaaS, fintech, and B2B platforms that handle customer data
- Vendors whose enterprise customers require it before signing
Key requirements
- Documented security policies and access controls
- Logging, monitoring, and incident response
- Vendor management and change management
- Risk assessments and continuous evidence collection
Risks of non-compliance
Lost enterprise deals, longer security reviews, and inability to move upmarket.
This is educational and not legal advice. Talk to your attorney about your specific exposure.
How Scale helps
We build the technical controls, evidence pipeline, and documentation your auditor expects.