Key takeaways:
Socialive is SOC 2 Type 2 and ISO 27001 certified
The platform keeps content secure in transit and at rest
Security and compliance are top priorities at Socialive
Tech buyers, stop us if you’ve heard this one before.
You’ve just seen a demo of a product that seems to address your every need — then your CISO gets involved. The deal dies on the vine because the vendor is deemed a security risk.
With Socialive’s SOC 2 Type 2 certification, this nightmare scenario isn’t a risk in corporate video creation.
Our commitment to data protection and our rigorous security measures are significant reasons Socialive is trusted across healthcare, financial services, insurance, and Fortune 1000 companies. Enterprise organizations must ensure all vendors meet high-security standards and video is no exception.
Here’s how Socialive is able to meet those high standards.
What is SOC 2?
Becoming SOC 2 certified is no easy task and isn’t a self-declared or self-reported status. The American Institute of Certified Public Accountants (AICPA) developed Systems and Organizations Controls (SOC) to outline “trust services criteria” service organizations (ie. tech vendors such as Socialive) must meet in the security, availability, processing integrity, confidentiality, and privacy of information processed by their systems.
It’s up to the service organization to make sure their company meets the defined criteria. As stated within Socialive’s SOC 2 certification: “Socialive is responsible for its service commitments and system requirements and for designing, implementing, and operating effective controls.”
Whether or not an organization meets trust services criteria must be determined by a third-party reviewer.
Basically, becoming SOC 2 certified means a company has opened its digital ledger for review and is found to comply with strict data security standards.
SOC 2 Type 1 vs. SOC 2 Type 2
Socialive’s SOC 2 certification is type 2 and, yes, there is a difference between SOC 2 types 1 and 2.
SOC 2 Type 1 evaluates how well the organization’s systems are structured, while SOC 2 Type 2 also evaluates how well the organization uses those systems and whether or not it is a sustainable model.
Meaning, Socialive’s SOC 2 Type 2 compliance shows that cloud video creation provides the ability to meet rigorous data security and privacy measures both now and in the future.
Why SOC 2 compliance matters for the enterprise
Data privacy is a must for any corporation. Plain and simple.
We’re thrilled to report that we passed security audits with flying colors! We designed our cloud video creation platform to meet security and data protection standards that meet or exceed requirements typical for large organizations.
The platform, built for enterprise companies, provides the reliability and security to deliver video at scale — with SOC 2 compliance being that proof.
“If you want to focus on the enterprise, you have to have a really strong security profile. So early on, we decided to keep our footprint as small as possible by only collecting the data we need.”
Ben Davenport, CTO, Socialive
What SOC 2 compliance means for your organization
Great! Socialive is SOC 2 Type 2 certified. So what does that mean for my company outside of the thumbs up from our security lead?
With security measures in place, we can focus on making life easier for users.
There’s no hardware required and single sign-on (SSO) ensures users can access the platform easily without sacrificing security.
Since the platform only captures strictly necessary personal identifiable information (PII) and encrypts all content in transit and at rest, businesses can trust that only the users who can access content are ones with proper access.
“It’s not just about how we handle data, but even some of the structure of the platform itself. For example, we have roles so that users can segment the product and only allow permissions for different types of users.”
David Moricca, CEO, Socialive
Security may be seen as a bottom-line benefit, meaning it’s best when prevention works and you don’t notice any issues, but it can also mean freedom for top-line production. SOC 2 Type 2 compliance means you can reassure CISOs while scaling up your video creation output.
What SOC 2 compliance means for your customers
Tight security measures for tech vendors also have a huge effect on customers, too. Namely, they can continue to trust that their confidence and information won’t be compromised.
Whether it’s internal training material that features private individuals or asynchronous recordings that contain sensitive information, customers need to know that your vendors and your video platform won’t put them at risk.
“As Socialive becomes more and more critical within organizations and their use cases, it’s crucial that we maintain a security-first mindset.”
Ben Davenport, CTO, Socialive
Socialive’s dedication to data security
SOC 2 compliance is only one part of our commitment to data security and privacy.
Just as the decision to go for the tougher standard in SOC 2 Type 2, Socialive has procured an ISO 27001 certification.
Socialive’s ISO 27001 certification
Yes, another set of letters and numbers, but for anyone unfamiliar, the ISO 27001 standard is a step beyond even SOC 2 certification. While SOC 2 focuses on the implementation and scope of organizational controls, ISO 27001 requires a proactive approach by providing a framework for constant monitoring and improvement of organizational controls.
To conform with ISO 27001, an organization must actively follow and maintain the best practices outlined by the International Organization for Standardization.
TL;DR — ISO 27001 helps organizations proactively identify and address potential weaknesses to manage cyber-risks.
Speed up compliance workflows in four steps
Of course, while Socialive secures data within the platform, cloud video creation itself can also help organizations meet their own compliance requirements.
Here’s an example of how Socialive and video can streamline compliance reviews:
- Prepare
Videos subject to compliance with brand and legal guidelines require preparation of details like video topic, script, and creative elements. - Create
The video is created in Socialive, recorded on a mobile device or a desktop camera, then clipped with creative elements added prior to review. - Review & Approve
Content admins send completed videos for a compliance review using a review tool such as Proofpoint. - Publish
Once approved by brand and legal, the video can be distributed to audiences via Socialive’s various integrations.
This is just one example of a workflow, but this makes it easier to scale compliant video creation across all channels.
Socialive’s track record with Fortune 1000 companies
Commitment to data security is a huge piece to Socialive’s enterprise video creation.
The ability to scale corporate video creation, making security a top priority, and best-in-class support are all reasons why Fortune 1000 companies such as Oracle trust Socialive.
Secure cloud video creation with Socialive
Back to the scenario we started with: your security lead has questions about the safety of cloud video creation. It’s an easy answer for your part — just point to our certifications. We’ve built our platform to stay ahead of the game when it comes to compliance.
Socialive makes video creation hassle-free, without sacrificing security. The platform captures only strictly necessary PII and encrypts all video content. With SOC 2 Type 2 and ISO 27001 certifications, rest assured that the Socialive product team is dedicated to prioritizing security and privacy.
To see how AI video editing works, take a look at our recorded demo of the Editor.
