Big news on the security front: involve.me is officially SOC 2 Type I compliant.
This is a major step forward in our ongoing effort to keep your data safe and private.
SOC 2 (System and Organization Controls 2) is a widely recognized auditing standard developed by the AICPA (American Institute of Certified Public Accountants). It evaluates how companies manage customer data based on several criteria.
In simple terms, it’s a rigorous test of how well we protect your data.
This achievement reflects our dedication to maintaining the highest standards for securing customer data.
What SOC 2 Type I Means
SOC 2 Type I focuses on whether the design of our internal controls is solid, right now. It confirms that we have the right systems and processes in place to manage and protect customer data.
Our report was issued by an independent, accredited auditing firm after a thorough review of our systems, policies, and procedures.
Next step, SOC 2 Type II.
Same controls, but this time the focus is on how consistently we apply them over a full 12-month stretch.
The official audit window for Type II is starting soon, and we’ve already signed a letter of intent with our auditor, which is available in our Trust Center. This demonstrates our full commitment to completing the Type II attestation next.
Why This Matters for You
If you’re in a regulated industry, or running enterprise-level operations, you need to know your vendors take data protection seriously.
This milestone gives you that peace of mind.
And we’re not just SOC 2 compliant. We’re also fully compliant with GDPR, the European Union’s strict data privacy law. This means we meet high standards for data protection on both sides of the Atlantic.
By completing the SOC 2 Type I audit and maintaining GDPR compliance, we’re providing documented assurance that involve.me has the necessary systems and controls to handle personal information, offer transparency, and respect your rights as a user.
This milestone will help our customers and partners confidently evaluate our platform for their most important use cases
Whether you're using involve.me to:
collect sensitive customer data
run secure lead-gen campaigns
or handle customer interactions at scale
...you can trust that we’ve built the platform with security at its core.
Accessing Our SOC 2 Report
To ensure confidentiality, the full SOC 2 Type I report is only available under NDA and is shared exclusively with Enterprise Plan customers or prospects who have signed a letter of engagement.
If you're interested in reviewing the report, you can request access directly from our Trust Center or get in touch with our team to start the process.
What’s Next
SOC 2 isn’t a checkbox. It’s a long-term commitment.
We’re proud of this milestone, but we’re even more focused on what’s ahead: SOC 2 Type II, continued investment in infrastructure, and ongoing efforts to protect your data every single day.
Stay tuned for updates on our Type II progress and more ways we’re working to protect your data and earn your trust every day.