Is Smallstep SOC 2 Compliant?

Smallstep is pleased to announce the SOC 2 Type II certification of our SaaS platform.

Smallstep is pleased to announce the SOC 2 Type II certification of our SaaS platform.

This SOC 2 Type II Certification demonstrates that an independent accounting and auditing firm reviewed and examined our company and that we achieved stringent benchmarks in security, privacy, availability, processing integrity, and confidentiality.

The Smallstep platform is built on standards-based, open-source technology to help organizations of all sizes prevent outages, automate compliance and improve certificate issuance. Scale your infrastructure security practices with confidence using our SaaS platform knowing that we are committed to securing our own infrastructure following proven industry standards.

Customers can request a copy of our Type II audit by emailing support@smallstep.com. The report is considered confidential and should not be distributed other than for governance activities.