Merkle Science is proud to announce that we are Service Organization Control (SOC) 2 Type 1 compliant. On May 4, 2022 Merkle Science successfully completed a SOC 2 Type 1 audit, which was conducted by Sensiba San Filippo LLP, a Certified B Corporation that specializes in accounting and business advisory services.
SOC 2 Type 1 compliance authenticates that the Merkle Science internal system controls are designed and implemented in alignment with data protection best practices. It confirms that the company has robust internal systems control and operational security capabilities in place to provide its customers with industry-leading data asset protection.
Nirmal Aryath Koroth, Co-Founder & Chief Technology Officer at Merkle Science, says: “Undertaking the extensive SOC Type 2 auditing process reinforces our commitment to designing, implementing, and operating extensive security controls and processes for our users. It showcases our dedication to fortifying our security practices, monitoring data processes, and ultimately providing our customers and partners with the assurance that their data assets are protected from loss and unauthorized access.”
What is Service Organization Control (SOC) 2 Type 1?
SOC 2 Type 1 is a widely recognized and respected compliance auditing standard developed by the American Institute of Certified Public Accounts (AICPA), which rigorously assesses a service organization’s internal control functions and designs. SOC 2 examines the effectiveness of internal controls based on AICPA’s Trust Services Criteria for information and systems.
The audit is globally recognized, placing Merkle Science in compliance with information security’s best practices. Further, it confirms that, by implementing effective and efficient risk management and information security practices, Merkle Science has met the five key objectives of trust services - security, availability, processing integrity, confidentiality, and privacy.
The SOC 2 Type 1 compliance authenticates that Merkle Science’s internal system controls are designed and implemented in a way that guarantees compliance with security principles set out in AICPA’s Trust Services Criteria.
As part of the organization’s ongoing commitment to best-in-class processes, the highest level of security and compliance, and customer protection we will renew our SOC 2 and ISO 27001: 2013 certifications annually, and make the reports available to all customers and partners on request. In addition, Merkle Science is in the process of completing SOC 2 Type 2 certification, to further ensure the security of its customers' and partners’ valuable data and intellectual property.