We hold a SOC 2 Type 2 attestation and have done so for four years. We’re working through ISO 27001 and Cyber Essentials Plus right now. We do a full penetration test every year with an independent firm. And on top of all of that, we run a bug bounty program. If you’re a customer,… Continue reading Why We Run a Bug Bounty Program (And Why It’s Worth the Noise)

When we decided to rebuild our compliance program — moving off a GRC tool that had gone quiet after an acquisition, and expanding from SOC 2 alone to a combined SOC 2 Type 2 + ISO 27001 + Cyber Essentials Plus program — we did what we tell our own customers to do: a proper… Continue reading Vanta vs Drata vs Sprinto vs ComplyJet: What We Learned Buying a GRC Platform (And Who We Chose)

Late Friday evening on 23rd June, as I was shutting down for the day, at 6.15 pm I received a concerned email from a customer in Singapore, Is SyncEzy protected against this Zero Day Exploit? This by the way is a perfect subject to get any TECH CEO to open the email immediately. As I opened… Continue reading Enhancing Data Security in a Post-Zero-Day World: The SyncEzy Commitment

What is SOC 2 Type 2 Certification? SOC 2 Type 2 Certification is a Type of Certification that verifies that a service organization has established and implemented controls and procedures to safeguard the privacy, security, and confidentiality of customer data. SOC 2 (System and Organization Controls 2) is a set of auditing standards developed by… Continue reading SyncEzy is SOC 2 Type 2 Certified Now

In a world where our computers are constantly generating huge amounts of new information, the issue of data security is becoming a very important one. Businesses today are asking themselves whether they can trust the safety of their sensitive information as it travels between so many interconnected devices. As a result of this, data security… Continue reading Information Security & Portal Access Using 2FA at SyncEzy

SOC 2 Certification SyncEzy is certified for SOC 2. General Data Protection Regulation (GDPR) What is the GDPR? The GDPR is a comprehensive data protection law that came into effect on May 25, 2018. It replaced existing EU law to strengthen the protection of “personal data” and the rights of the individual. It’s a single… Continue reading SyncEzy Security, SOC-2 and GDPR Information