Trust & Security
Data security is key
ValDatum follows SOC 2 Type II guidelines (AICPA) with ISO 27001 accreditation in progress — physical security, IT controls, and third-party background verification.
We understand how important it is to keep our clients' information private. To earn our clients' trust and protect confidentiality, we follow the strictest data security and compliance standards: we adhere to the SOC 2 Type II guidelines set by the American Institute of Certified Public Accountants (AICPA), and we are in progress toward ISO 27001 accreditation.
What is SOC 2 Type II?
SOC 2 Type II is a set of guidelines established by the AICPA outlining how data should be handled and safeguarded, based on five trust principles:
- Security
- Availability
- Integrity
- Confidentiality
- Privacy
Protocols followed by ValDatum
Physical security
- Office premises are accessible only with access cards issued to employees, with cycle counts monitoring issuance.
- Premises are monitored through high-definition CCTV 24×7.
- Production areas are staff-only; visitors are not allowed near workstations.
- Confidential documents are stored securely with limited access.
- All hard drives are encrypted so data cannot be extracted if a laptop is lost.
- USB storage is disabled (peripherals like mouse, monitor, and keyboard excepted).
IT controls
- NordLayer firewall and endpoint protection guard our network; risky sites and downloads are off the grid entirely.
- All laptops time-out after a short period of inactivity.
- Regular data backups protect against disaster (VDI environments excepted, where no local data exists).
- Client information exchange happens only through approved channels — MS Teams, designated client-server locations, or client email systems.
Third-party background verification
All team members complete a third-party background check prior to joining — covering education, employment, police verification, and criminal records.
Technology prowess
We accelerate digital transformation through robust, purpose-built tech solutions — designing phased modernization programs that deliver priority business outcomes, and co-creating with customers and partners to build solutions that work in your environment.