Vitamin Software is Now SOC 2 Certified

 

In an interconnected world, protecting against cyber threats is more important than ever.

Vitamin Software's SOC2 Compliance Badge
 
 

At Vitamin Software, we know that our customers thrive in safe and secure environments. To further demonstrate our commitment to information security, we have obtained SOC 2 certification.

The SOC 2 standard evaluates an organization’s security posture according to the trust services criteria (TSCs) of security, confidentiality, availability, processing integrity, and privacy. Achieving SOC 2 involves establishing enterprise controls – policies, processes, or procedures – to safeguard client and corporate information.

Our focus on security starts at the top. Vitamin’s Chief Information Security Officer (CISO), Catalin Andrei, is also the organization’s Chief Information Officer. Catalin manages our information security roadmap. An American citizen, Catalin ensures security and compliance is streamlined across Vitamin’s operations: from software development and systems architecture to hiring and operational procedures.

Catalin holds over 15 years of experience in the design and implementation of enterprise information systems for domestic and international organizations, including Troy Medicare, Medicine Value Partners, Aventi Health, the World Bank, and UN Agencies. Catalin has hands-on experience with some of the world’s most intricate enterprise information security policies.

 

Information security is our top priority. For this reason, we use enterprise-grade best practices to protect our and our clients’ data. These practices include:

  • Implementing a contractual framework for information security with current and prospective clients, backed by liability insurance with cybersecurity risk policies

  • Performing background checks, enforcing Information Security Policies through centrally managed solutions, and providing continuous security training to staff

  • Enforce secure coding principles and monitor for unexpected events or usage patterns when a tool is deployed to production

To maintain SOC 2 compliance, Vitamin uses the Drata automation platform to continuously monitor 100+ internal security controls against the highest possible standards. Our SOC 2 certification is verified by Sensiba San Filippo (SSF).

Drata automation keeping tabs on internal security controls.

 
portrait of soonho kim

“We create solutions and provide services that enable our customers securely deliver their offering. Our team has been trained on various security principles ranging from minimizing the attack surface area to favoring open designs and paying proper attention to the weakest links of a system.

Personally, I'm excited to have the opportunity to practice and put to good use my "white hat" skills (i.e. ethical hacker skills) in the best interest of our customers.”

— Catalin Andrei, CIO

 
 

At Vitamin Software, keeping data safe is our top priority. We are trusted, reliable partners to companies from highly regulated industries. We care about clients’ success, and embed information security measures into everything we do.

 

 

How can we help you succeed?

Vitamin Software specializes in helping companies achieve Product-Market Fit and beyond. We build, operate, and maintain robust and secure products.

Vitamin is an Amazon Web Services (AWS) Partner Network Select Consulting Partner and is SOC 2 and Cyber Essentials Plus certified.

We’re eager to work alongside you to achieve your goals.