Soffi has completed a SOC 2 Type II audit. An independent auditor examined how Soffi designs and operates its security controls over a period of time, not just at a single point, and the result is a report you can review.

Our SOC 2 Type II report is available through the Soffi trust center (opens in a new tab). Request access there to review it. The trust center also lists Soffi's current subprocessors.

Most security reviews ask the same questions about where Soffi runs, what it can access, and where your data goes. These pages answer them directly, and are a good starting point to share with your security team alongside the report:

ArchitectureWhere Soffi runs, and what it doesn't need.Data handlingWhat stays in your control, what Soffi keeps, and the third parties involved.IsolationA private environment for every Workspace, and what it can't reach.GitHubThe permissions the Soffi GitHub app holds, and how to revoke them.

Was this helpful?

Compliance

Get the report

For your security review