
Estimated reading time: 1 min
Keeping Your Data Safe with SOC 2 Type 2 Compliance
As part of our ongoing commitment to security and compliance, Plane is now SOC 2 Type 2 compliant.


Plane Team

PEO vs EOR: What are the Differences and Which is Right for You?
Read Story →
A Guide to the Best Remote Work Tools for HR Teams
Read Story →
How to Manage a Remote Team: 6 Ideas for Better Remote Work
Read Story →As an HR and payroll platform, Plane knows that keeping our customers' data and funds safe is essential. In 2021, we achieved SOC 2 Type 1 compliance at Plane (formerly called Pilot). As part of Plane’s continued focus on security, we recently achieved SOC 2 Type 2 compliance, which goes even further than Type 1 toward demonstrating the effectiveness of a company's internal security controls .
What is SOC 2 compliance?
SOC 2 (System and Organization Controls) is the gold standard for data protection, developed by the AICPA, or American Institute of Certified Public Accountants. It’s an independent assessment of a company’s internal security controls and is designed for service providers that store customer data in the cloud. This auditing procedure reviews a company’s internal security measures, to ensure that they are safely handling customer data and protecting their customers’ privacy. In short, companies that are SOC 2 compliant are demonstrating — and practicing! — a core commitment to security.For the SOC 2 Type 2 audit, Plane again worked with Schneider Downs, an independent and nationally recognized CPA firm registered with the Public Company Accounting Oversight Board. We’re happy to say that we achieved a clean SOC 2 Type 2 attestation report for the AICPA’s 2017 Trust Services Criteria for Security.What’s the difference between SOC 2 Type 1 and SOC 2 Type 2 compliance?
Type 1 reviews a company’s internal security controls for a single point in time, while Type 2 reviews their controls over a length of time – in Plane’s case, over 5 months. Because Type 2 audits a company’s internal controls for a period of time, it is even more rigorous than Type 1 audits and shows the effectiveness of those controls.Can I get more information about your SOC 2 report?
Yes! If you’d like to dig deeper into our SOC 2 Type 2 attestation report, we’re happy to share more information with you. Please get in touch with us at support@plane.com.Related articles
From startups to large corporations, US companies of all sizes use Plane for global payroll, benefits and compliance.


What Is a PEO? A Guide to Its Benefits, Risks, and Alternatives
A PEO can help business owners and HR execs find and retain talent. Figure out if partnering with a PEO is right for your business with this guide.
