Placeholder

Keeping Your Data Safe with SOC 2 Type 2 Compliance

As part of our ongoing commitment to security and compliance, Pilot is now SOC 2 Type 2 compliant.

A blue header image with the AICPA SOC 2 seal at the center

Plane Team

As an HR and payroll platform, Pilot knows that keeping our customers' data and funds safe is essential. In 2021, we achieved SOC 2 Type 1 compliance. As part of Pilot’s continued focus on security, we recently achieved SOC 2 Type 2 compliance, which goes even further than Type 1 toward demonstrating the effectiveness of a company's internal security controls .

What is SOC 2 compliance?

SOC 2 (System and Organization Controls) is the gold standard for data protection, developed by the AICPA, or American Institute of Certified Public Accountants. It’s an independent assessment of a company’s internal security controls and is designed for service providers that store customer data in the cloud. This auditing procedure reviews a company’s internal security measures, to ensure that they are safely handling customer data and protecting their customers’ privacy. In short, companies that are SOC 2 compliant are demonstrating — and practicing! — a core commitment to security.For the SOC 2 Type 2 audit, Pilot again worked with Schneider Downs, an independent and  nationally recognized CPA firm registered with the Public Company Accounting Oversight Board. We’re happy to say that we achieved a clean SOC 2 Type 2 attestation report for the AICPA’s 2017 Trust Services Criteria for Security.

What’s the difference between SOC 2 Type 1 and SOC 2 Type 2 compliance?

Type 1 reviews a company’s internal security controls for a single point in time, while Type 2 reviews their controls over a length of time – in Pilot’s case, over 5 months. Because Type 2 audits a company’s internal controls for a period of time, it is even more rigorous than Type 1 audits and shows the effectiveness of those controls.

Can I get more information about your SOC 2 report?

Yes! If you’d like to dig deeper into our SOC 2 Type 2 attestation report, we’re happy to share more information with you. Please get in touch with us at support@pilot.co.

Related articles

From startups to large corporations, US companies of all sizes use Pilot for international payroll, benefits and compliance.

Want industry news and product updates?Sign up for our newsletter.