Nebuly’s SOC2 Type I
Nebuly’s SOC2 Type I
TLDR
→ This article was written by Julien Roux, co-founder of Nebuly, announcing Nebuly's SOC2 Type I certification in September 2024. → SOC2 Type I is an independently audited certification covering security, availability, processing integrity, confidentiality, and privacy controls. Unlike optional reporting standards, SOC certifications require an independent auditor to sign off on the report. → For enterprise customers, SOC2 Type I certification provides independently validated assurance that Nebuly's data security controls are appropriately designed and in place — simplifying their own vendor assessment and compliance processes. → Since this announcement, Nebuly has also achieved SOC2 Type II, ISO 27001, and ISO 42001 certifications, extending independent validation of its security and AI governance practices. → For organizations deploying AI analytics in regulated industries or with strict data governance requirements, independent security certification is a prerequisite for vendor selection. This post explains what the certification covers and what it means for customers.
We are thrilled to announce that Nebuly, the ROI platform for enterprise AI, has achieved a significant milestone in its commitment to data security: SOC2 Type I certification. This accomplishment highlights our dedication to ensuring the highest level of protection, compliance, and reliability for your valuable data.
What is SOC reporting?
Service Organisation Control (SOC) reporting is the process of using established standards to report on the appropriateness and effectiveness of a service organisation’s internal controls. The report is usually provided to third parties who rely on that organisation.
Unlike many other optional reporting standards, SOC certifications require an independent audit. For an organisation to claim any SOC accreditation, an independent auditor must sign off on a report to confirm it is fairly presented and that controls are in place and designed effectively.
SOC reports come in three forms:
SOC 1 reports focus on financial reporting objectives.
SOC 2 reports focus on principles for the protection of customer data and the controlled use of technology.
SOC 3 reports are a redacted version of the SOC 2 report that can be shared publicly.
Understanding the SOC 2 certification
SOC 2 is an auditing standard developed by the American Institute of Certified Public Accountants (AICPA). SOC2 Type I certification focuses on a company’s non-financial reporting controls, covering security, availability, processing integrity, confidentiality, and privacy. A rigorous examination of our controls and processes validates our unwavering commitment to maintaining a secure environment for your data.
The importance of the SOC2 Type I certification
At Nebuly, we recognise that data security is paramount in today’s digital landscape. Our SOC 2 Type I certification showcases our dedication to safeguarding your information by implementing stringent controls and protocols. It demonstrates:
Uncompromised data security. SOC 2 compliance ensures that we have implemented robust security measures to protect your data and reduce the risk of potential breaches or unauthorised access.
Confidentiality and Privacy. SOC 2 certification assures you that your sensitive information is treated with utmost confidentiality, aligning with the highest privacy laws and regulations.
Enhanced Trust and Reliability. SOC 2 compliance demonstrates our dedication to establishing trust, reliability, and secure partnerships with our customers. You can rely on Nebuly as a dependable technology partner committed to safeguarding your data.
Benefits for Our Customers
As a valued Nebuly customer, you can be assured that our SOC 2 Type I certification delivers you benefits beyond our core AI automation proposition:
Peace of mind. With our certified compliance, you can be confident that your data is protected with the utmost care, meeting the highest industry standards.
Streamlined compliance. Our certification simplifies your own audit processes, assuring you that your compliance requirements are also upheld when using the Nebuly platform.
Increased efficiency and productivity. Our secure infrastructure allows you to focus on your core business functions, all while knowing that your data is safe.
Nebuly understands the criticality of securing your data and the trust you place in us as your technology partner. Our certified compliance exemplifies our commitment to maintaining the highest levels of protection, confidentiality, and reliability. By choosing Nebuly, you can be confident that your data automation needs will be met with an unwavering commitment to security.
About Nebuly
Nebuly is the ROI platform for enterprise AI. It connects to the AI agents your business runs on, the assistants your customers interact with, and the tools your employees use every day, including Claude, ChatGPT, and Copilot, and translates that activity into business value. How much time is being saved across teams. What revenue your AI is influencing. What adoption and AI proficiency look like in practice, across departments and geographies. All aggregated at the organizational level, never tied to individuals.
If you need clarity on what your AI investment is actually delivering, book a demo.
Stay up to date on what we're learning, building, and seeing as enterprise teams deploy and measure AI agents in production.