We at Terra never store any information. However, many of our customers and partners have brought up the topic of SOC 2 compliance.
Terra's primary goal has always been listening to what our customers want. Hence, for the last few months, we've worked extremely hard to implement the security and privacy standards associated with SOC 2 compliance into Terra. Brief reminder: We are also HIPAA compliant!
We used another fellow Y-Combinator company to help us with becoming SOC 2 compliant: Vanta.
SOC 2 compliance is the most sought-after security framework for growing SaaS companies. Further details on SOC 2 compliance:
- The primary compliance standard for service organizations, developed by the American Institute of CPAs (AICPA), outlines how organizations should manage customer data
- Demonstrates an organization's ability to safeguard the privacy and security of customer data effectively
- Consists of the following trust service criteria: privacy, security, availability, confidentiality, and processing integrity
Alongside GDPR and HIPAA, all our team members have completed SOC security and privacy training and implemented multiple obligatory security practices.
We are proud to say that on behalf of Terra's clients and partners, we have acquired this compliance 🥳
