Avatar is SOC-2 Type 2 Compliant: How This Helps You

We know privacy and security are a few of your top priorities. You’re centralizing reams of driver and client data into one cloud-based system. You don’t want to be the next company in the headlines with a major data breach or cyberattack. 

At Avatar, we’re proud to renew our SOC-2 compliance with our recent Type 2 audit. This milestone confirms that your data is safe and secure with us, as demonstrated by a holistic third-party audit of our controls. (Trust us, your IT department is going to be happy about this.)

What is SOC-2 Type 2 Compliance?

System and Organization Control 2 (SOC-2) — pronounced “sock two” — is an auditing structure for evaluating and reporting on controls at service organizations like software and data processing companies. In short, it lets users know they can trust a service provider with their data and systems. 

SOC-2 was created by the Association of International Certified Professional Accountants. Independent Certified Public Accounting firms conduct the audits, evaluating five trust services criteria. 

The SOC-2 trust services categories include: 

1. Security — Are information and systems protected against unauthorized access or damage that could compromise data?
2. Availability — Are information and systems available for operation?
3. Processing integrity — Is system processing complete, valid, accurate, timely and authorized?
4. Confidentiality — Is information designated as confidential protected?
5. Privacy — Is personal information collected, used, retained, disclosed and disposed of?

Under SOC-2, there are two levels: Type 1 and Type 2. 

• Type 1 addresses a given point in time. 
• Type 2 covers ongoing compliance over a period of time, typically six months to a year.

Why SOC-2 Type 2 Matters & Impact on Fleets

Simply put, SOC-2 Type 2 compliance is a must-have for Software-as-a-Service firms like Avatar. 

It aligns with our mission to help our clients improve their recruiting, compliance and training efforts. How can you recruit more drivers, ensure compliance with Federal Motor Carrier Safety Administration regulations and keep the roads safe if all of your cloud-based data and systems aren’t secure? You can’t. 

Avatar’s SOC-2 Type 2 compliance also validates our commitment to data protection, system integrity and operational excellence, and it demonstrates our professional, mature security practices and our dedication to increasing trust with our clients and other stakeholders.

Ultimately, our SOC-2 Type 2 certification provides assurance that your data is safe and secure and your system is reliable. This provides you, the fleet owner, with significant peace of mind, allowing you to focus on your core business of recruiting, compliance, and training without the constant worry of data breaches or cyberattacks. And you don’t just have to take our word for it. We have a third party confirming that we’re meeting the industry’s best practices for data security on an annual basis. 

To learn more about Avatar or our security and privacy controls, don’t hesitate to get in touch anytime.