Placeholder

Keeping Your Data Safe with SOC 2 Type 2 Compliance

As part of our ongoing commitment to security and compliance, Pilot is now SOC 2 Type 2 compliant.

A blue header image with the AICPA SOC 2 seal at the center

Plane Team

Published on February 23, 2023

As an HR and payroll platform, Pilot knows that keeping our customers' data and funds safe is essential. In 2021, we achieved SOC 2 Type 1 compliance. As part of Pilot’s continued focus on security, we recently achieved SOC 2 Type 2 compliance, which goes even further than Type 1 toward demonstrating the effectiveness of a company's internal security controls .

What is SOC 2 compliance?

SOC 2 (System and Organization Controls) is the gold standard for data protection, developed by the AICPA, or American Institute of Certified Public Accountants. It’s an independent assessment of a company’s internal security controls and is designed for service providers that store customer data in the cloud. This auditing procedure reviews a company’s internal security measures, to ensure that they are safely handling customer data and protecting their customers’ privacy. In short, companies that are SOC 2 compliant are demonstrating — and practicing! — a core commitment to security.For the SOC 2 Type 2 audit, Pilot again worked with Schneider Downs, an independent and  nationally recognized CPA firm registered with the Public Company Accounting Oversight Board. We’re happy to say that we achieved a clean SOC 2 Type 2 attestation report for the AICPA’s 2017 Trust Services Criteria for Security.

What’s the difference between SOC 2 Type 1 and SOC 2 Type 2 compliance?

Type 1 reviews a company’s internal security controls for a single point in time, while Type 2 reviews their controls over a length of time – in Pilot’s case, over 5 months. Because Type 2 audits a company’s internal controls for a period of time, it is even more rigorous than Type 1 audits and shows the effectiveness of those controls.

Can I get more information about your SOC 2 report?

Yes! If you’d like to dig deeper into our SOC 2 Type 2 attestation report, we’re happy to share more information with you. Please get in touch with us at support@pilot.co.

Related articles

From startups to large corporations, US companies of all sizes use Pilot for international payroll, benefits and compliance.

Want industry news and product updates?Sign up for our newsletter.