Files.com undergoes an annual SOC 2 Type II audit as part of our ongoing commitment to maintaining a high standard of security, availability, and operational integrity.

This audit is conducted by an independent third-party auditor and provides assurance that Files.com has implemented—and consistently follows—robust security controls.

What Is SOC 2 Type II?

SOC 2 (System and Organization Controls 2) is a widely recognized auditing standard developed by the American Institute of Certified Public Accountants (AICPA). It evaluates how cloud service providers like Files.com handle customer data across five Trust Services Criteria:

1. Security – Protection against unauthorized access, both physical and logical
2. Availability – System availability and uptime, relative to business commitments
3. Processing Integrity – Accuracy and reliability of system processing
4. Confidentiality – Protection of sensitive or restricted data
5. Privacy – Collection, use, retention, and disposal of personal information

There are two types of SOC 2 reports:

• Type I: Validates that appropriate controls exist at a single point in time.
• Type II: Evaluates not only the existence of controls, but also their operating effectiveness over time—typically a 3 to 12-month period.

SOC 2 Type II is the more rigorous of the two, and provides higher assurance to customers that security controls are not only in place, but are consistently followed and monitored.

Files.com SOC 2 Audit History

Our most recent SOC 2 Type II audit engagement was conducted by KirkpatrickPrice, a well-established audit firm specializing in cloud and SaaS platforms.

• Audit Period: October 1, 2023 – March 31, 2024
• Final Report Issued: May 31, 2024
• Next Audit Period Start Date: April 1, 2024

Files.com has successfully completed multiple SOC 2 Type II audits with KirkpatrickPrice in previous years, reinforcing our long-term investment in trustworthy infrastructure and secure operational practices.

Accessing the Report

Files.com provides copies of our SOC 2 Type II report, or a Bridge Letter (for gaps between audit periods), to customers and qualified prospects under NDA.

To request the latest SOC 2 report:

• Contact your Account Executive or Account Manager
• Or reach out to our support team for assistance

We are happy to support your organization’s due diligence, vendor risk review, or compliance documentation efforts.