Upbound Achieves SOC 2 Type II Compliance: Strengthening Trust and Security

We are thrilled to announce that Upbound, the creator of the CNCF Crossplane project, has successfully achieved SOC 2 Type II compliance. This significant milestone showcases our unwavering commitment to ensuring the highest level of security, privacy, and data protection for our valued customers. We are also launching the Upbound Trust Center where companies can find a consolidated view of everything we are doing to validate our adherence to industry-recognized standards and best practices, providing peace of mind to businesses and organizations that entrust us with their critical data.

What is SOC 2 Type II Compliance?

SOC 2 (Service Organization Control 2) is a globally recognized compliance framework developed by the American Institute of Certified Public Accountants (AICPA). It focuses on five key trust principles: Security, Availability, Processing Integrity, Confidentiality, and Privacy (commonly known as the Trust Services Criteria).

SOC 2 Type II compliance requires companies to establish and adhere to comprehensive internal controls and security practices over an extended period. The audit process involves assessing the effectiveness of these controls, as conducted by independent third-party auditors. By achieving SOC 2 Type II compliance, Upbound demonstrates its commitment to implementing robust security measures and maintaining strict operational procedures to safeguard customer data.

The Importance of SOC 2 Type II Compliance

In today's digital landscape, where data breaches and cyber threats pose significant risks, achieving SOC 2 Type II compliance is crucial for businesses that handle sensitive information. Compliance with these rigorous standards ensures that companies have implemented appropriate controls and processes to protect data integrity, privacy, and availability.

Upbound recognizes that security is paramount when it comes to building trust with our customers. SOC 2 Type II compliance is a testament to our dedication to providing a secure environment for our customers' data and operations. This enables more customers to start standardizing on Crossplane with Upbound as their single point of control for cloud-native infrastructure and application environments.

The Journey to SOC 2 Type II Compliance

Achieving SOC 2 Type II compliance is no small feat. It requires a comprehensive approach involving the collaboration of various teams and stakeholders within an organization. Our path to SOC 2 Type II compliance began with a thorough evaluation of our existing security measures. We then identified areas that required improvement, ensuring that our policies, procedures, and infrastructure aligned with the Trust Services Criteria. We established a dedicated team to drive the compliance efforts, working closely with external auditors to assess and validate our controls.

Throughout the process, we continuously refined our security practices, implemented robust access controls, and enhanced our incident response and data protection protocols. Our commitment to data privacy and security extends beyond mere compliance, encompassing a proactive approach to staying ahead of emerging threats and evolving industry standards.

New Trust Center

Achieving SOC 2 Type II compliance reinforces Upbound's commitment to protecting our customers' data and upholding the highest standards of security and privacy. We understand that trust is the foundation of successful partnerships, and we take this responsibility seriously. To learn more about our commitment to security and SOC 2 Type II compliance, we invite you to visit our newly launched Trust Center. This comprehensive resource provides:

• Information about our compliance standards
• Detailed information about our security practices
• Data protection measures and vulnerability submission
• Support and bug reporting information
• Information about the availability and status of our products
• and more.

We Value Your Trust

Achieving SOC 2 Type II compliance is a significant milestone for Upbound, underscoring our dedication to security, trust, and the protection of our customers' valuable data. We are proud to have successfully met the stringent requirements of this esteemed compliance framework, demonstrating our commitment to operational excellence and industry-leading security practices. If you need a copy of our detailed report you can send an email to security@upbound.io.

By continually investing in our security infrastructure and adhering to best practices, Upbound remains at the forefront of delivering cutting-edge, cloud-native technology solutions while maintaining the highest standards of data protection.

Visit our Trust Center today to learn more about our SOC 2 Type II compliance, security practices, and commitment to protecting your data. Explore how Upbound can be your trusted technology partner in an ever-evolving digital landscape by viewing this webinar explaining why Upbound and Crossplane might be right for you to consider as you evolve and improve your internal cloud platform.