At a time when data breaches unfortunately saturate news headlines, ensuring security of sensitive information is non-negotiable. At Vivun, we strive to not just meet industry standards, but to exceed these baseline standards. Vivun Security is happy and proud to say we’ve done that again this year by successfully completing our SOC2 Type 2 and ISO 27001 audits. Since the beginning of our Security program, we’ve sought and achieved a SOC2 Type 1 and SOC2 Type 2 for all of our products, even if that means establishing multiple audit cadences. And although the ISO 27001 certification doesn’t expire until 3 years after issue date, we continue to audit it each year under a “surveillance review” to ensure we’re maintaining a best-in-class security program. 

Why do we do this?

It’s the case for the Vivun culture as a whole: we’re not satisfied with simply meeting the bare minimum. We’re energized by pushing ourselves, exceeding “the bar”, and feeling confident that our customers can trust us with their data. 

What’s involved in the SOC2 and ISO 27001 audits?

These audits are ultimately to ensure that our Security program is implemented soundly and in the way we – and industry experts – have structured it to be. The holistic review of our information security management system includes reviewing our: 

• disaster recovery tests
• risk assessments
• business impact assessments
• security awareness training program
• identity and access management practices
• logging and monitoring practices
• incident management policies, procedures, and tests 

Curious about the specific controls Vivun was audited against?

Our full SOC2 Type 1 and Type 2 reports are available on our security portal.