Platform Certification and Compliance

SOC2 Type 2

Significance: A SOC2 examination is a report on controls at a service organization relevant to security, availability, processing integrity, confidentiality, or privacy.

SOC2 reports are intended to meet the needs of a broad range of users that need detailed information and assurance about the controls at a service organization relevant to security, availability, and processing integrity of the systems, the service organization uses to process users’ data, and the confidentiality and privacy of the information processed by these systems.

(Source: https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2)

Status: SOC2 Type 2 report is available on request with an NDA.

.

PCI DSS

Significance: PCI DSS is a security standard designed to protect the integrity of credit card processing and transactions. Classic Central undergoes an annual PCI assessment to simplify PCI compliance for our customers, as the Classic Central application may impact the security of a Cardholder Data Environment (CDE).

Status: PCI AOC is available on request.

 

GDPR

Significance: The General Data Protection Regulation (GDPR) is an European law that established protections for privacy and security of personal data about individuals in European Economic Area (“EEA”)-based operations and certain non-EEA organizations that process personal data of individuals in the EEA. For more information, see GDPR Data Privacy Security Agreement.

Status: Compliant

CSA

Significance: Third-party assessment of security of SaaS offering. For more information, see Cloud Security Alliance.

Status: Certified

SSDLC

Secure Software Development Life Cycle (SSDLC) refers to a set of practices, processes, and activities that aim to integrate security considerations into every phase of the software development process. The goal of SSDLC is to create software that is secure by design, minimizing vulnerabilities and the potential for security breaches.

Status: Compliant