CostGraph is now SOC 2 Type II compliant

From the beginning, keeping our customers’ data secure and confidential has been a priority at CostGraph. When you connect your cloud accounts and infrastructure to our platform, you’re placing trust in us.

We wanted to back that commitment with independent evidence of how our security controls work.

Today, I’m proud to share that CostGraph has successfully completed its SOC 2 Type II examination.

Why is SOC 2 Type II important?

For us, SOC 2 is about giving customers more confidence in the platform we’re building. Your team should have evidence it can review when deciding whether to trust CostGraph with its data.

More formally, SOC stands for System and Organization Controls. A SOC 2 examination assesses an organization’s controls against criteria established by the American Institute of Certified Public Accountants (AICPA). A Type II report evaluates both the design of those controls and how effectively they operated over a defined period. AICPA’s SOC reporting guidance.

That gives your security and procurement teams a concrete basis for evaluating CostGraph as part of their vendor review.

What does a SOC 2 Type II examination cover?

The AICPA’s Trust Services Criteria span five categories. The categories covered by an individual examination depend on its scope:

• Security: Protecting systems and information against unauthorized access, use, or disclosure.
• Availability: Keeping systems available for operation and use in line with the organization’s commitments.
• Processing integrity: Ensuring system processing is complete, accurate, valid, authorized, and timely.
• Confidentiality: Protecting information designated as confidential.
• Privacy: Handling personal information appropriately throughout its collection, use, retention, disclosure, and disposal.

Together, these categories provide a framework for evaluating how an organization manages and protects information. AICPA’s Trust Services Criteria.

Completing this examination is an important milestone for CostGraph. Maintaining and improving the practices behind it remains part of our everyday responsibility to our customers.