|
SOC 2 and ISO 27001 certifications validate that Comprose maintains strong security controls, rigorous data protection standards, and reliable governance processes. These certifications demonstrate a commitment to safeguarding customer information, reducing risk, and maintaining high levels of operational integrity. They show that Comprose follows internationally recognized frameworks designed to keep systems secure and compliant. |
St. Louis, MO – Tuesday, September 10, 2024 – Comprose announced today that it has achieved SOC 2 Type II compliance in accordance with the American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations, commonly known as SSAE 18. In addition, COMPROSE, INC. has successfully maintained the ISO 27001 certification, a globally recognized standard for information security management systems (ISMS), through a Surveillance audit.
Achieving these certifications validates that COMPROSE, INC. provides enterprise-level security and protection for customer data, offering peace of mind that their information is handled with the highest standards of security and integrity.
"Our team is proud to have achieved both SOC 2 and ISO 27001 certifications for another year. At the core of our mission is the security and trust of our clients, and these achievements reinforce our dedication to safeguarding their information at every level. It’s especially important to have used our own Zavanta software to not only gain these certifications, but to have also cut our audit time in half,” says John Lewis, Comprose President.
Comprose achieved SOC 2 and ISO 27001 certifications by partnering with Vanta and using our own software, Zavanta’s comprehensive policy and procedure management system. Zavanta played a crucial role in automating the creation, review, and approval of documents, ensuring that all policies were up-to-date, accessible, and compliant. Our Zavanta features, like version control, cross-linking, filters, and robust access controls, provided a seamless and efficient way to organize and manage critical documents.
Zavanta's ability to verify employee understanding through read receipts, e-signatures, and compliance testing also demonstrated to auditors that Comprose’s full team fully adhered to security protocols – all while keeping security protocols internal and with resources readily available to the team. Zavanta’s system created a structured environment for maintaining documentation, setting a solid foundation for ongoing compliance and future recertifications.
Comprose’s security and compliance principles guide how we deliver our products and services, enabling people to simply and securely access the digital world.
SOC 2 and ISO 27001 demonstrate Comprose’s commitment to these principles, reinforcing that stringent operational controls are in place to secure customer data and ensure availability. These certifications reflect COMPROSE’s unwavering dedication to information security, positioning the company as a trusted partner.
About Comprose
Comprose, founded in 1987, is a leading provider of intentionally designed policy and procedure (P&P) and standard operating procedure (SOP) software. The company is dedicated to helping people thrive by gaining access to accurate “how-to” knowledge anytime, anyplace, in any language. Comprose's solution enables organizations to improve performance, ensure compliance, mitigate risks, and drive measurable business improvements.
About Prescient Assurance
COMPROSE, INC. was audited by Prescient Assurance, a leader in security and compliance attestation for B2B SAAS companies worldwide. Prescient Assurance is a registered public accounting in the US and Canada and provides risk management and assurance services, which include, but are not limited to, SOC 2, PCI, ISO, NIST, GDPR, CCPA, HIPAA, and CSA STAR. For more information about Prescient Assurance, you may reach out to them at info@prescientassurance.com.
An unqualified opinion on a SOC 2 Type II audit report demonstrates to COMPROSE, INC.’s current and future customers that they manage their data with the highest standard of security and compliance.
FAQs
-
What are SOC 2 and ISO 27001 certifications?
SOC 2 and ISO 27001 are independent security and compliance certifications that verify an organization’s controls for protecting data, managing risk, and maintaining secure operations.
-
Why are these certifications important for Comprose customers?
They assure customers that Comprose adheres to strict, verified security standards, which help protect sensitive information and reduce operational risk.
-
This is the How does SOC 2 differ from ISO 27001? title
SOC 2 focuses on controls related to security, availability, processing integrity, confidentiality, and privacy. ISO 27001 focuses on establishing and maintaining a comprehensive information security management system.
-
How do these certifications improve trust in Comprose’s platform?
They demonstrate that Comprose’s policies, procedures, and technical safeguards have been independently evaluated and meet rigorous industry standards.
-
What does certification mean for Comprose’s internal processes?
It means Comprose maintains structured governance, documented procedures, clear risk management practices, and continuous monitoring of security controls.
-
How do SOC 2 and ISO 27001 reduce risk for organizations using Comprose?
Certified systems reduce the likelihood of data breaches, operational errors, and compliance failures by ensuring reliable, consistent security controls.
-
How does Comprose maintain ongoing compliance after certification?
Comprose follows ongoing internal reviews, continuous monitoring, regular audits, and structured updates to keep controls current and effective.