SOC 2, a Replacement for the Previous SAS 70 Standard, Confirms Strong Control Environment for Customer Data Security and System Availability
Los Angeles, CA – November 21, 2011 — Everbridge, Inc., the world’s recognized leader in emergency and incident notification systems, announced that it is the first emergency notification service (ENS) provider to meet or exceed a Service Organization Control (SOC) 2 Type II audit, which includes an evaluation of the operating effectiveness of controls for a period of at least six calendar months. SSAE 16 Professionals, LLP, a firm specializing in SOC 2 audits, evaluated Everbridge’s design and operating effectiveness of internal controls and processes related to Security and Availability Trust Services Principles. SSAE 16 determined from its audit that Everbridge has met or exceeded expectations and is fully compliant to this standard.
Adherence to this standard affirms Everbridge’s superior data security procedures and unrivaled system availability, ensuring the company meets the most stringent customer security and availability requirements, particularly for healthcare and financial services organizations. With the increasing number and variety of business risks, particularly ones created from the reliance on the business processes of third-party system vendors, it has become an imperative for organizations to require assurances that these vendors are adhering to best practices when it comes to security and system availability. Meeting the SOC 2 audit standards help address this critical need.
Everbridge’s focus on strong internal controls is evident in this report,” says Tim Roncevich, Partner at SSAE 16 Professionals. “The successful completion of this audit is a testament to Everbridge’s integrity, accountability, and commitment to its customers.”
“Best-in-class security and compliance is a material contract requirement for many customers,” said Chris Vuillaume, SVP, Global Sales for Everbridge. “Completion of the SOC 2 audit means organizations can count on Everbridge to securely and reliably provide the industry’s leading incident notification solutions, which today more than 25 million people rely on.”
SOC 2 Audit Details
The audit undergone by Everbridge was conducted in accordance with the AICPA (American Institute of CPAs) SOC reporting standards. It was conducted by SSAE 16 Professionals, LLP, in conjunction with Windes & McClaughry Accountancy Corporation, which is a full service accounting firm providing SOC 2 Type I and Type II audits. SSAE 16 Professionals evaluated Everbridge’s design and operating effectiveness of internal controls and processes related to the Security and Availability Trust Services Principles. According to the American Institute of CPAs, the SOC 2 replaces in its entirety the SAS 70 designation, as the “new SOC report guidance will address the misuse of SAS 70 reports … [and] will enable service organizations to demonstrate reliability and trust in their services.”
About Everbridge, Inc.
Everbridge, Inc., the world’s recognized leader in emergency and incident notification systems, merges technology with industry expertise to help millions of people communicate in a crisis, manage operational incidents and connect on a daily basis. The company’s notification platform is backed by redundant data centers offering unmatched availability and Zero-Single-Point-of-Failure. Organizations in more than 100 countries — including the State of Connecticut, Salesforce.com, Marathon Oil Corporation, the American Red Cross, Seton Hall University and Virginia Tech — rely on Everbridge for their emergency notification and day-to-day communications needs. For more information about Everbridge solutions, visit www.everbridge.com. Connect with us on Twitter at @everbridge and on Facebook at Facebook.com/everbridgeinc.
About SSAE 16 Professionals, LLP
SSAE 16 Professionals, LLP is one of the nation’s leading firms specializing solely in SSAE 16 audits and readiness assessments. Each of our professionals has over 10 years of relevant experience at “Big 4” and other large international or regional accounting firms. Each professional is certified as a CPA (Certified Public Accountant), CISA (Certified Information Systems Auditor), CIA (Certified Internal Auditor), CISSP (Certified Information Systems Security Professional), and/or MBA (Master of Business Administration). For more information, please visit www.SSAE16Professionals.com.