# soc 2 Published articles for soc 2. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## How Ninth Wave built AI-powered open finance onboarding on Amazon Bedrock DevFeed: [How Ninth Wave built AI-powered open finance onboarding on Amazon Bedrock]() Original publisher: [Read original article]() Author: Shawn Kelly Published: 2026-09-14T15:58:57Z Content type: article Language: en Sources: [Artificial Intelligence]() Topics: [Amazon Bedrock AgentCore](), [Artificial Intelligence](), [API](), [Architecture & Design](), [Security](), [Finance](), [Amazon Web Services](), [data]() Tags: [advanced-300](), [ai](), [amazon-bedrock](), [amazon-bedrock-agentcore](), [apis](), [customer-solutions](), [fintech](), [onboarding](), [pci-dss](), [security](), [soc-2]() ### AI overview The article describes how Ninth Wave built Compass, a multi-agent AI onboarding assistant powered by Amazon Bedrock AgentCore. Compass helps financial institutions validate bank APIs, map fields to Financial Data Exchange standards, and score production readiness while supporting secure, compliant open finance connectivity. ### Source excerpt Learn how Ninth Wave built Compass, a multi-agent AI onboarding assistant on Amazon Bedrock AgentCore that validates bank APIs against Financial Data Exchange (FDX) standards, scores compliance, and compresses open finance onboarding from weeks to minutes while meeting SOC 2 and PCI DSS requirements. ## 🎙 How I AI: GPT-6 Astra is a banger + Stripe's AI playbook + Grok Bot vs. OpenClaw: why I replaced my entire agent stack DevFeed: [🎙 How I AI: GPT-6 Astra is a banger + Stripe's AI playbook + Grok Bot vs. OpenClaw: why I replaced my entire agent stack]() Original publisher: [Read original article]() Author: Claire Vo Published: 2026-09-07T15:02:41Z Content type: opinion Language: en Sources: [Lenny's Newsletter]() Topics: [Bot](), [OpenClaw](), [Artificial Intelligence](), [Linear](), [Slack](), [soc 2]() Tags: [agent](), [ai](), [linear](), [openclaw](), [slack](), [soc-2]() ### AI overview A podcast episode compares Grok Bot with OpenClaw through Claire's migration of her agent setup. It discusses using specialized bots for inboxes, family coordination, pull-request review, compliance monitoring, customer support, subscription audits, and shopping, along with permissions, multi-account access, and maintaining agent context and routines. ### Source excerpt Your weekly listens from How I AI, part of the Lenny's Podcast Network ## Compliance documents are now available in Team settings DevFeed: [Compliance documents are now available in Team settings]() Original publisher: [Read original article]() Author: Will Sather Published: 2026-08-19T00:00:00Z Content type: release Language: en Sources: [Vercel News]() Topics: [Security](), [Vercel](), [SOC]() Tags: [compliance](), [documentation](), [enterprise](), [security](), [security-policies](), [soc-2](), [trust-center](), [vercel]() ### AI overview Vercel added a Compliance section to Team settings, allowing users to preview and download compliance documents such as SOC 2 Type 2 attestations and security policies. Downloads and previews are watermarked, and the feature is available on Pro and Enterprise plans. ### Source excerpt A new Compliance section in Team settings lets you preview and download Vercel's compliance documents directly in the dashboard. These include attestations like SOC 2 Type 2, security policies, and other security documents that are available through the Trust Center. You can select a single document, an entire attestation, or multiple documents, and download them together as a single zip archive. Every download and preview is watermarked with your user and team information. Some entries link out to external resources instead, such as an auditor's public certificate directory. The Trust Center remains available for additional security information. Vercel's compliance documents are available on Pro and Enterprise plans. Learn more in the compliance documentation. Read more ## Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL DevFeed: [Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL]() Original publisher: [Read original article]() Author: Koray Oksay Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Kubernetes](), [Platform Engineering](), [Security](), [developer velocity](), [Containers](), [supply-chain-security](), [YAML](), [opa](), [rego]() Tags: [common-expression-language](), [compliance](), [container-images](), [containers](), [cosign](), [deployment](), [developer-velocity](), [governance](), [hipaa](), [integration](), [kubernetes](), [kyverno](), [pci-dss](), [platform](), [policy](), [security](), [security-policies](), [sigstore](), [soc-2](), [supply-chain-security]() ### AI overview A guide to using Kyverno and its Common Expression Language support for Kubernetes governance. It explains how platform engineering teams can enforce policies, automate resource changes, generate resources, verify image signatures, and maintain security and compliance while preserving developer velocity. ### Source excerpt Kyverno with CEL support provides Policy-as-Code for Kubernetes governance. Enforce security, automate guardrails, and boost developer velocity for platform engineering teams. ## Trust you can verify: Figma is now ISO 42001 certified DevFeed: [Trust you can verify: Figma is now ISO 42001 certified]() Original publisher: [Read original article]() Author: Tushar Badlani Published: 2026-07-01T12:00:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [ai-governance](), [Figma](), [responsible-ai](), [Security]() Tags: [ai](), [ai-governance](), [figma](), [iso](), [iso-27001](), [responsible-ai](), [security](), [soc-2]() ### AI overview Figma announces ISO/IEC 42001:2023 certification for its Artificial Intelligence Management System. An accredited independent auditor assessed Figma's AI governance policies, risk management processes, data practices, development practices, and technical safeguards across its platform. ### Source excerpt Saying you use AI responsibly is easy, but proving it to an accredited auditor is harder. We decided that was a standard worth meeting. ## SOC 2 Controls for Non-Human Identities: CC6, CC7, and CC8 DevFeed: [SOC 2 Controls for Non-Human Identities: CC6, CC7, and CC8]() Original publisher: [Read original article]() Author: info@goteleport.com (Kayne McGladrey) Published: 2026-06-09T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [soc 2](), [audit](), [Authorization](), [sigstore]() Tags: [audit](), [authorization](), [certificates](), [credentials](), [soc-2]() ### AI overview This article explains how Teleport maps workload attestation, short-lived certificates, access rules, and audit logs for non-human identities to SOC 2 controls CC6, CC7, and CC8. It describes evidence auditors can use, including access rules, denied credential issuance logs, and Sigstore policy configurations where enabled. ### Source excerpt Discover how to meet SOC 2 CC6, CC7, and CC8 controls for non-human identities. ## Audit trails are a feature, not a compliance tax DevFeed: [Audit trails are a feature, not a compliance tax]() Original publisher: [Read original article]() Author: Mohit Bansal Published: 2026-06-04T00:00:00Z Content type: article Language: en Sources: [Webflow Blog]() Topics: [Logging](), [log management](), [SIEM, Security](), [Security]() Tags: [compliance](), [critical-infrastructure](), [logging](), [logs](), [nis2](), [security](), [siem](), [soc-2]() ### AI overview The article argues that audit logging has evolved from an overlooked compliance requirement into a product capability. Queryable, timestamped logs can support sales, vendor evaluations, accountability for AI agents, and more complete breach reconstruction. ### Source excerpt Logging used to satisfy auditors. Now it closes deals, holds AI agents accountable, and decides whether you can reconstruct a breach. ## EU AI Act Compliance: Requirements, Risks, and What to Document DevFeed: [EU AI Act Compliance: Requirements, Risks, and What to Document]() Original publisher: [Read original article]() Author: info@goteleport.com (Kayne McGladrey, CISSP) Published: 2026-04-15T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Artificial Intelligence](), [Requirements](), [Documentation](), [audit](), [data-governance](), [Logging](), [Monitoring](), [Deployment](), [data]() Tags: [ai](), [compliance](), [cybersecurity](), [data](), [data-governance](), [dataset](), [deployment](), [development](), [documentation](), [eu](), [iso-27001](), [lifecycle](), [logging](), [monitoring](), [nist](), [real-time](), [reproducibility](), [soc-2](), [versioning]() ### AI overview A practical guide to EU AI Act compliance covering requirements, risks, technical documentation, logging, data governance, lifecycle evidence, traceability, monitoring, and human oversight. It outlines key compliance milestones from August 2025 through August 2027. ### Source excerpt Cut through EU AI Act complexity with practical guidance on requirements, risks, and documentation. ## CockroachDB Plans Native X.509 SAN Support for SPIFFE and SPIRE Integration DevFeed: [CockroachDB Plans Native X.509 SAN Support for SPIFFE and SPIRE Integration]() Original publisher: [Read original article]() Author: Sanchit Khanna,Biplav Saraf Published: 2026-03-13T00:00:00Z Content type: article Language: en Sources: [Cockroach Labs]() Topics: [CockroachDB](), [Databases](), [SPIFFE](), [SPIRE](), [certificates](), [Zero Trust](), [Security](), [Microservice]() Tags: [architectures](), [auditability](), [aws-iam](), [certificates](), [cockroachdb](), [compliance](), [cryptographic](), [database](), [distributed](), [processor](), [regex](), [security](), [soc](), [soc-2](), [spiffe](), [spire](), [standards](), [teams](), [verification](), [zero-trust]() ### AI overview The article previews planned CockroachDB authentication support for Subject Alternative Name fields in X.509 certificates. It explains how SAN support is intended to enable integration with SPIFFE and SPIRE and support regex-based identity mapping for cloud-native workloads. ### Source excerpt In the evolution of cloud-native security, identity has become the new perimeter. ## How AI Agents Impact SOC 2 Trust Services Criteria DevFeed: [How AI Agents Impact SOC 2 Trust Services Criteria]() Original publisher: [Read original article]() Author: info@goteleport.com (Kayne McGladrey) Published: 2026-02-25T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [soc 2 compliance](), [soc 2](), [Artificial Intelligence](), [Security](), [data]() Tags: [ai](), [ai-agents](), [compliance](), [data](), [models](), [security](), [soc-2](), [soc-2-compliance]() ### AI overview This article explains how agentic AI affects SOC 2 Trust Services Criteria. It maps SOC 2 requirements to autonomous systems and discusses controls for models, APIs, training data, automated decisions, AI outputs, and production execution records. It also outlines compliance challenges caused by autonomous actions and the need for effective, auditable oversight. ### Source excerpt Learn how AI agents impact SOC 2 compliance and discover best practices for compliant agentic systems, models, and data. ## Chainguard + Second Front: A faster, more secure path into government markets DevFeed: [Chainguard + Second Front: A faster, more secure path into government markets]() Original publisher: [Read original article]() Published: 2026-02-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [container images](), [DevSecOps](), [supply-chain-security](), [Vulnerabilities](), [Deployment](), [Cybersecurity]() Tags: [chainguard](), [chainguard-containers](), [chainguard-for-compliance](), [cmmc](), [container-image-compliance](), [container-images](), [cve-remediation](), [cybersecurity](), [devsecops](), [federal-compliance](), [fedramp](), [government](), [iso](), [provenance](), [sbom](), [second-front-systems](), [secure-by-default](), [secure-by-design](), [security](), [soc-2](), [software-supply-chain]() ### AI overview Chainguard and Second Front are partnering to help software companies pursue federal market requirements, including FedRAMP authorization and DoD impact-level accreditations. The article describes combining Chainguard's hardened container images with Second Front's Game Warden DevSecOps platform to support secure application delivery and vulnerability reduction. ### Source excerpt Discover how Chainguard and Second Front are partnering to help build a secure path into government markets for your organization. ## Latacora Achieves AWS Advanced Tier Services Partner Status DevFeed: [Latacora Achieves AWS Advanced Tier Services Partner Status]() Original publisher: [Read original article]() Published: 2026-01-27T21:00:00Z Content type: release Language: en Sources: [Latacora]() Topics: [Amazon Web Services (AWS)](), [Security & compliance, Cloud security](), [Security](), [AWS IAM](), [Monitoring](), [threat detection]() Tags: [amazon-web-services-aws](), [cloud-security](), [compliance](), [iam](), [iso-27001](), [monitoring](), [security](), [soc](), [soc-2](), [threat-detection]() ### AI overview Latacora announces that it has achieved Amazon Web Services (AWS) Advanced Tier Services Partner status within the AWS Partner Network. The company says the designation reflects validated technical expertise, AWS-certified professionals, and a proven record of customer success in cloud security and compliance. ### Source excerpt We are thrilled to announce a major milestone for Latacora: we have achieved the Amazon Web Services (AWS) Advanced Tier Services Partner status within the AWS Partner Network (APN). This designation reflects Latacora's technical expertise and diligence in delivering exceptional cloud security and compliance solutions to our clients, and confirms that we have successfully completed a rigorous validation process demonstrating a proven track record of customer success delivered by a team of AWS-certified professionals with specialized technical capabilities. ## Applying SOC 2 with Chainguard: A practical guide for DevOps and engineering leaders DevFeed: [Applying SOC 2 with Chainguard: A practical guide for DevOps and engineering leaders]() Original publisher: [Read original article]() Published: 2026-01-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [SOC](), [DevOps](), [supply-chain-security](), [Containers](), [CI/CD](), [Software as a service]() Tags: [chainguard-containers](), [chainguard-libraries](), [chainguard-sboms](), [ci-cd](), [compliance](), [containers](), [devops](), [how-does-chainguard-help-with-soc-2](), [sboms](), [secure-by-default](), [security](), [soc](), [soc-2](), [soc-2-chainguard](), [soc-2-compliance](), [software-supply-chain]() ### AI overview This practical guide explains how DevOps and engineering teams can apply SOC 2 principles to continuously changing cloud-native infrastructure and software supply chains. It covers Type 1 and Type 2 reporting, continuous control evidence, automated integrity checks, audit visibility, secure-by-default containers, and automated SBOMs, with Chainguard presented as a way to reduce audit friction without slowing delivery. ### Source excerpt Learn how Chainguard helps DevOps teams meet SOC 2 requirements with secure-by-default containers, automated SBOMs, and continuous, audit-ready evidence. ## Ensuring Compliance and Governance in Kubernetes for Banking Workloads DevFeed: [Ensuring Compliance and Governance in Kubernetes for Banking Workloads]() Original publisher: [Read original article]() Author: Urolime Technologies Published: 2025-11-04T12:50:33Z Content type: article Language: en Sources: [Kubernetes Archives - Urolime Blogs]() Topics: [Kubernetes](), [Security](), [Orchestration](), [Containers](), [Cloud Native Ecosystem](), [Scalability](), [Availability]() Tags: [banking](), [cloud-native](), [compliance](), [containers](), [gdpr](), [governance](), [kubernete](), [kubernetes](), [orchestration](), [pci-dss](), [security](), [soc-2](), [zero-trust]() ### AI overview This article examines how Kubernetes can support compliance and governance for banking workloads. It describes benefits such as scalability, high availability, and fault tolerance, while identifying governance and security challenges involving complex configurations, dynamic workloads, regulatory requirements, and audit visibility. It highlights Kubernetes consulting services and zero-trust network policies as relevant practices. ### Source excerpt In the fast-paced banking era, data security and compliance is not a choice, but a necessity. Here Kubernetes has emerged as an adaptable platform to govern the containerized workloads. Its scalable, fault-tolerant application orchestration feature has proven it to be the ideal choice for the industry. In this blog we will analyze on how Kubernetes [...] ## Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster DevFeed: [Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster]() Original publisher: [Read original article]() Published: 2025-10-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Application Security](), [open-source-security](), [Open Source](), [Software](), [chainguard]() Tags: [chainguard](), [chainguard-containers](), [chainguard-security](), [cmmc](), [compliance](), [cves](), [fedramp](), [iso-27001](), [open-source-software](), [pci-dss](), [security](), [soc-2](), [stateramp]() ### AI overview This article explains how organizations can treat software compliance as a continuous practice rather than a periodic audit exercise. It describes how open-source components, CVE remediation, provenance, SBOM coverage, and audit evidence affect platform engineering, application security, development velocity, and regulated-market access, while presenting Chainguard as a solution provider. ### Source excerpt Turn compliance into a growth driver with Chainguard. Eliminate CVEs, stay audit-ready, and meet FedRAMP, SOC 2, and ISO 27001 with secure images. ## Laravel Nightwatch Achieves SOC 2 Type 1 Certification DevFeed: [Laravel Nightwatch Achieves SOC 2 Type 1 Certification]() Original publisher: [Read original article]() Author: André Valentin Published: 2025-10-09T16:55:44Z Content type: news Language: en Sources: [Laravel Blog]() Topics: [Laravel](), [SOC](), [Security](), [Monitoring](), [log management]() Tags: [availability](), [compliance](), [enterprise](), [laravel](), [logging](), [logs](), [monitoring](), [security](), [soc](), [soc-2]() ### AI overview Laravel Nightwatch has completed a SOC 2 Type 1 audit, confirming that its controls were suitably designed and in place at a specific point in time. The certification strengthens assurances around the security, confidentiality, availability, and handling of customers' monitoring and logging data. Laravel plans to pursue SOC 2 Type 2 certification for Nightwatch and extend similar compliance work to Laravel Forge. ### Source excerpt Laravel Nightwatch achieves SOC 2 Type 1 certification, enhancing security and compliance for monitoring Laravel applications in enterprise environments. ## 10 reasons your CISO will love Temporal Cloud DevFeed: [10 reasons your CISO will love Temporal Cloud]() Original publisher: [Read original article]() Author: Tim Imkin Published: 2025-09-30T00:00:00Z Content type: opinion Language: en Sources: [Temporal Blog]() Topics: [Cloud](), [Security](), [Encryption](), [Firewall](), [Single sign-on (SSO)](), [Access Control](), [MFA](), [certificates](), [TLS (Transport Layer Security)](), [saml](), [ci](), [Serverless]() Tags: [access-control](), [api](), [api-keys](), [aws](), [certificates](), [ci](), [cloud](), [compliance](), [data](), [firewall](), [gdpr](), [google-cloud](), [mfa](), [network](), [permissions](), [soc](), [soc-2](), [temporal-concepts]() ### AI overview This article presents ten security and compliance characteristics of Temporal Cloud for CISO review. It describes client-side encryption with customer-controlled keys, outbound-only connectivity, mutual TLS, SAML SSO, RBAC, private connectivity options, secure debugging, and stated SOC 2, HIPAA, and GDPR support. ### Source excerpt Discover 10 reasons CISOs choose Temporal Cloud: no plaintext data, no inbound connectivity, mTLS with your CA, private links, SOC 2/HIPAA, secure debugging. ## Laravel Cloud Achieves SOC 2 Type 2 Certification, Nightwatch and Forge Next DevFeed: [Laravel Cloud Achieves SOC 2 Type 2 Certification, Nightwatch and Forge Next]() Original publisher: [Read original article]() Author: André Valentin Published: 2025-09-05T09:54:10Z Content type: news Language: en Sources: [Laravel Blog]() Topics: [SOC](), [Cloud](), [Security](), [Availability](), [Laravel]() Tags: [2025](), [attestation](), [audits](), [availability](), [cloud](), [compliance](), [data-protection](), [enterprise](), [monitoring](), [reports](), [security](), [soc](), [soc-2](), [standards](), [trust](), [verification]() ### AI overview Laravel Cloud achieved SOC 2 Type 2 certification for Security, Confidentiality, and Availability after completing its audit on July 31, 2025. The article explains the significance of SOC 2, contrasts Type 1 and Type 2 reports, and outlines planned SOC 2 audits for Nightwatch and Forge. ### Source excerpt Laravel Cloud achieves SOC 2 Type 2 certification for Security, Confidentiality, and Availability. Read how Laravel's compliance roadmap includes Nightwatch and Forge SOC 2 audits. ## Laravel Cloud achieves SOC 2 Type 1 Compliance DevFeed: [Laravel Cloud achieves SOC 2 Type 1 Compliance]() Original publisher: [Read original article]() Author: André Valentin Published: 2025-03-26T03:04:00Z Content type: news Language: en Sources: [Laravel Blog]() Topics: [SOC](), [soc 2](), [Laravel](), [Cloud](), [Security](), [Availability](), [data](), [Open Source]() Tags: [2](), [availability](), [certifications](), [cloud](), [compliance](), [data-protection](), [laravel](), [open-source](), [report](), [security](), [soc](), [soc-2]() ### AI overview Laravel Cloud has completed a SOC 2 Type 1 audit, confirming that its security controls are suitably designed and implemented at a specific point in time. The article explains the certification's implications for access protection, availability, confidentiality, privacy, and operational transparency, and notes plans for SOC 2 Type 2 certification and certifications for Laravel Forge and Laravel Nightwatch. ### Source excerpt SOC 2 Type 1 compliance achieved with SOC 2 Type 2 coming soon for Laravel Cloud as well as Laravel Forge and Laravel Nightwatch. ## Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance DevFeed: [Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance]() Original publisher: [Read original article]() Author: Snyk Team Published: 2025-03-20T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security, Privacy and Abuse Prevention](), [DevSecOps](), [vulnerability management](), [Artificial Intelligence](), [Automation](), [threat detection](), [cloud-infrastructure](), [Cybercrime]() Tags: [ai](), [application-security](), [automation](), [blog](), [cloud-infrastructure](), [community](), [compliance](), [customer](), [customer-featured](), [data-privacy](), [devsecops](), [executive](), [financial-services](), [finserv](), [interest](), [pci-dss](), [security](), [soc-2](), [threat-detection](), [vulnerability-management]() ### AI overview This article distills a fireside-chat discussion about application security challenges in financial services, featuring Snyk's Field CTO and CIBC's Senior Director of Security Service Management. It covers the tension between rapid innovation and strict compliance, risks from cybercrime, data privacy, cloud infrastructure, third-party services, legacy systems, and modern applications, and the role of automation, continuous security testing, monitoring, DevSecOps, AI-driven tools, and human oversight in vulnerability management. ### Source excerpt Join Snyk's Field CTO, Steven Schmidt, and Mihai Saveschi, Senior Director of Security Service Management at CIBC, for an exclusive fireside chat on the evolving landscape of application security in financial services. ## Neon is HIPAA Compliant DevFeed: [Neon is HIPAA Compliant]() Original publisher: [Read original article]() Author: Busra Demir Published: 2025-03-13T16:17:42Z Content type: article Language: en Sources: [Blog -- Neon Docs]() Topics: [Database](), [Security](), [Authorization](), [Encryption](), [Incident response](), [Monitoring](), [Shared Responsibility Model](), [Software as a service]() Tags: [access-control](), [company](), [compliance](), [database](), [encryption](), [hipaa](), [incident-response](), [iso-27001](), [logging](), [monitoring](), [product](), [security](), [security-best-practices](), [shared-responsibility](), [soc-2]() ### AI overview Neon announces completion of its HIPAA compliance audit, enabling customers to store Protected Health Information (PHI) on its database platform. The article describes safeguards including encryption, role-based access control, audit logging, continuous monitoring, incident response, breach notification, employee training, third-party requirements, and shared customer responsibilities. ### Source excerpt Neon has completed its HIPAA compliance audit, adding to our security achievements: SOC 2 Type 2, ISO 27001, ISO 27701, GDPR, and CCPA. If your company needs a HIPAA-compliant database, Neon can now securely store Protected Health Information (PHI). What is HIPAA Compliance? The... ## Turso completed SOC2 Type II compliance with zero issues DevFeed: [Turso completed SOC2 Type II compliance with zero issues]() Original publisher: [Read original article]() Author: Glauber Costa Published: 2024-07-09T00:00:00Z Content type: news Language: en Sources: [Turso Blog]() Topics: [Turso](), [Security](), [SOC](), [Data Management]() Tags: [aws](), [compliance](), [github](), [security](), [soc-2](), [soc-2-compliance](), [soc2](), [turso](), [vanta]() ### AI overview Turso announces that it completed a SOC 2 Type II compliance audit with zero issues. The article explains that the audit assessed its information-security policies, controls, and procedures, and describes how Vanta helped the small team automate compliance tasks and maintain velocity. ### Source excerpt Turso's SOC2 audit is now complete. And we passed with flying colors! ## Teleport Achieves ISO 27001, HIPAA, and SOC 2 Compliance Milestones DevFeed: [Teleport Achieves ISO 27001, HIPAA, and SOC 2 Compliance Milestones]() Original publisher: [Read original article]() Author: reed@goteleport.com (Reed Loden) Published: 2023-08-11T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [soc 2 compliance](), [soc 2](), [Security](), [trust](), [Software as a service](), [Availability]() Tags: [availability](), [compliance](), [hipaa](), [iso-27001](), [saas](), [security](), [soc-2](), [soc-2-compliance](), [trust]() ### AI overview Teleport announces ISO 27001 certification, HIPAA compliance, and an expanded SOC 2 Type II report covering the Confidentiality and Availability trust service criteria. ### Source excerpt An overview of Teleport Achieved ISO 27001, HIPAA, and SOC 2 Compliance Milestones ## Tinybird is SOC 2 Type II compliant DevFeed: [Tinybird is SOC 2 Type II compliant]() Original publisher: [Read original article]() Author: Tinybird Published: 2022-12-19T00:00:00Z Content type: release Language: en Sources: [Tinybird]() Topics: [soc 2](), [Security]() Tags: [compliance](), [enterprise](), [security](), [soc-2](), [tinybird-news]() ### AI overview Tinybird announces that it is SOC 2 Type II certified, highlighting enterprise security and compliance. ### Source excerpt Tinybird is SOC 2 Type II certified. Enterprise security without enterprise friction. Your compliance team will thank you. [Next page]()