Explore Optidata
Choose a path to the platform, products and resources.
The report in numbers
SOC 2 is an attestation framework defined by the AICPA (American Institute of Certified Public Accountants). A company asks an independent auditor to examine its controls against the Trust Services Criteria, and the auditor issues a report with its opinion.
It is a report, not a certification. The AICPA defines the criteria; it does not audit companies or approve individual reports. That is why Optidata says it has a SOC 2 Type II report, and never that it is SOC 2 certified.
A Type I report describes how controls were designed at a single point in time. A Type II report tests whether those controls actually operated over an observation window.
Optidata's report is Type II: the auditor followed the controls for 90 days instead of checking them on one day.
Three of the five Trust Services Criteria are in scope: Security, Availability and Confidentiality. The auditor examined 88 controls, and the audit covers Optidata's cloud and its workplace platform.
The examination went past infrastructure and looked at how the company is run:
90 days. The exact start and end dates of the period are stated in the report.
An independent auditor. The auditor's name, its opinion and the dates of the period are in the report itself, which Optidata shares under NDA. Ask for the report to read them.
Reading a SOC 2 report well means knowing its limits:
Three steps, and none of them is a procurement project:
Use the contact page or your account team and say which document you need: the SOC 2 report, ISO/IEC 27001 details, or answers to your own security questionnaire.
The report is confidential. An NDA is the only step between asking and reading it.
Your security and procurement teams get the report while they are still evaluating, not after the contract is closed.
SOC 2 FAQ
Optidata has a SOC 2 Type II report. SOC 2 is an attestation, so the correct term is report, not certification: an independent auditor examined Optidata's controls for Security, Availability and Confidentiality over a 90-day observation window.
Yes, under NDA. Request it through the contact page and say you need the SOC 2 Type II report. Your security team gets it during evaluation, before you sign a contract.
Security, Availability and Confidentiality. Processing Integrity and Privacy are not in the scope of Optidata's report.
It covers Optidata's own controls. The data center facilities hold their own SOC 2 Type II report and other credentials, listed on the trust center.
No. A SOC 2 report is written for customers, prospects and their auditors, so Optidata shares it under NDA instead of publishing it.
We use necessary cookies to make the site work. With your consent, we also use analytics and marketing cookies. Cookie policy.
Required for core features such as security, forms and language. They do not track you.
Help us understand how the site is used, with Google Analytics and Microsoft Clarity.
Let media pixels measure campaigns and personalize ads.
