Does InVision complete an SOC 2 Type 2 examination?

SOC 2 report

The Service Organization Control (SOC 2) report is based on the existing SysTrust and WebTrust principles. The purpose of the SOC 2 report is to evaluate an organization’s information systems relevant to security, availability, processing integrity, confidentiality, or privacy.

InVision completes the SOC 2 Type 2 examination on its Enterprise platform annually. Existing Enterprise customers can receive InVision’s SOC 2 report by contacting their account representative and completing an NDA.

SOC 3 report

The SOC 3 report is a redacted version of the SOC 2 report. The SOC 3 report summarizes the SOC 2 report, but it excludes details of the associated controls and control results. To request the SOC 3 report, go to InVision's public profile on Whistic and create a free account. You will then be able to download the latest SOC 3 report, along with the Security Assurance Package.