SOC 2 compliance, ISO-27001 and ISO-27701 certifications
At Watershed, we’re committed to information security and privacy. Our SOC 2 compliance, ISO-27001 and ISO-27701 certifications validate that we have the appropriate technical and organizational controls in place to ensure the confidentiality, integrity and availability of our customer’s data.
Established by the American Institute of Certified Public Accountants (AICPA), the SOC 2 audit formally reviews our policies, procedures and systems that protect information across the Trust Services Criteria. This includes factors such as:
- Security,
- Availability,
- Processing Integrity,
- Confidentiality, and
- Privacy.
The SOC 2 Type II audit is conducted on an annual basis, and the most recent report can be made available upon request.
The International Organization for Standardization 27001 Standard (ISO-27001) is a foundational information security standard that guarantees the secure management of office sites, development centers, support centers, and data centers. ISO-27701 is an amendment to and extension of ISO-27001 that focuses on data privacy and processing requirements.
Our ISO certifications are awarded from A-LIGN, an independent, third-party auditor. A‑LIGN is an ISO/IEC 27001 and 27701 certification body accredited by the ANSI-ASQ National Accreditation Board (ANAB). These certifications run for 3 years (renewal audits) and have annual touchpoint audits (surveillance audits).
Ready to get started?
Our team of learning and technology experts is here to help you build an evidence-based learning strategy so you can get the most out of Watershed—and your learning programs.