We’ve earned the SOC 2 Type 2 attestation

Maciej Bartłomiej Sikora
Content Writer
SOC 2 Type 2 audit badge

We’re back with an exciting update — we want to inform you that Nord Security, the provider of NordPass Business, has successfully passed the SOC 2 Type 2 audit.


The SOC 2 Type 2 attestation, received not too long after obtaining the Type 1, further underscores Nord Security’s commitment to the highest standards of data privacy and operational excellence.


Let us now explain what this achievement means for NordPass Business and its clients.

Why is passing the SOC 2 Type 2 audit a big deal?

SOC is short for System and Organization Controls, which refers to the framework developed by the American Institute of Certified Public Accountants (AICPA). In basic terms, SOC 2 is a report with an auditor's opinion that helps verify whether organizations have implemented effective controls and measures to ensure the security, availability, and privacy of customer data.

A company that participates in a voluntary SOC 2 audit and successfully receives certification proves to its customers and stakeholders that it can be trusted to handle sensitive information with the utmost care and responsibility.

The SOC 2 framework is divided into two categories: Type 1 and Type 2. Type 1 focuses on examining whether the organization's controls and documentation are designed following the relevant trust principles and comply with established standards. Meanwhile, Type 2 delves into the practical aspects, evaluating how efficiently these controls operate in real life.

So, when an organization earns the SOC 2 Type 2 attestation, it means that the organization's security measures proved to be consistently effective and efficient over time.

What does passing the SOC 2 Type 2 audit mean for NordPass Business?

Receiving the SOC 2 Type 2 attestation is the latest proof that Nord Security’s products, including NordPass Business, are designed with the highest data security standards and are highly effective in ensuring the privacy and confidentiality of sensitive information.

Since 2021, NordPass has been compliant with the ISO/IEC 27001:2017, another internationally recognized standard that verifies the company's strong information security management system.

In 2022, we passed the SOC 2 Type 1 audit, which confirmed that our organization's products are designed in line with the relevant trust principles. Therefore, it was only natural that we aspired to undergo the SOC 2 Type 2 audit, aiming to further demonstrate the effectiveness of our security measures. And now, we've made it happen.

So, if you are a NordPass Business customer — or someone considering using it in the future — we hope you take this SOC 2 Type 2 attestation announcement as confirmation that we have the necessary measures to protect your sensitive information.

Our goal is to continually improve our platforms to give our customers the peace of mind they expect. So, you can anticipate more updates like this one coming soon.

Stay safe!

Subscribe to NordPass news

Get the latest news and tips from NordPass straight to your inbox.