Certifications and compliance standards, explained
What certifications such as SOC 2 and ISO 27001 actually attest to, why an independent auditor rather than a vendor decides, and what Voroa holds today.
What this covers
A certification is an independent auditor’s statement that an organisation follows a defined set of controls. SOC 2 reports on how a service provider handles security and availability, and is what most software buyers ask for. ISO 27001 certifies that a company runs a formal information security management system. The distinction worth holding on to is that neither is something a company can award itself, and neither is a statement that a product is secure. They attest that documented processes exist and were followed during the audit period.
Voroa does not hold any security certification, and this page should not be read as a claim that it does or that any certification process is under way. If your organisation requires certified providers, Voroa does not meet that requirement today.