OutboundSync renews its SOC 2 Type II attestation

OutboundSync has renewed its SOC 2 Type II attestation — with a longer audit window and a stronger security program behind it. If you’re a customer who’s put us through a security review, or you’re about to, here’s what changed.

For the full background on why we pursued SOC 2 in the first place, read our original announcement: OutboundSync is SOC 2 Type II compliant.

What changed in this renewal

For this renewal, we extended the audit window from three months to six months. We also improved policies and procedures ahead of the audit, which raised the bar for our security program and for how we operate day to day.

A longer observation period and stronger controls make the renewal more useful both internally and for customers evaluating our platform.

Why we stayed with Advantage Partners and Vanta

We continued working with Advantage Partners as our auditor and Vanta as our GRC platform.

Advantage Partners has a strong US-based presence and senior leadership with experience spanning Deloitte, Twilio, Datto, and DataFox. Just as important, they maintain clear separation from both Vanta and our own team while conducting the audit. That independence matters.

Vanta created the modern GRC category and remains the leader in the space. We continue to value the quality of the platform and the clear separation between GRC software and the independent audit function.

Latest documents

The latest SOC 2 and related security documents are available in our Trust Center. Since our first attestation, the Trust Center has had over 2,200 visits — it’s become a meaningful part of how customers evaluate us during procurement.

This renewal is another step in building the kind of infrastructure company our customers can rely on. If you’re interested in syncing outbound data to your system of record, contact us.