# Security & Compliance

## SOC 2 Type II Compliant

Your data security is our priority. ATEK is SOC 2 Type II compliant, demonstrating our commitment to protecting your critical environmental monitoring data.

## SOC 2 Type II

Security, Availability & Confidentiality Compliant

SOC 2 Aligned

## What is SOC 2?

SOC 2 is the gold standard for demonstrating that a service organization has implemented robust controls to protect customer data. Developed by the AICPA, SOC 2 Type II compliance requires implementing security controls that are not just designed well, but are operating effectively over time.

### Rigorous Standards

Based on AICPA's Trust Service Criteria, the industry benchmark for security compliance.

### Auditable Standards

Our controls are designed and maintained to meet third-party auditable standards.

### Continuous Compliance

Continuous improvement ensures we maintain the highest security standards year over year.

## Trust Service Criteria We Cover

ATEK's SOC 2 compliance covers the following Trust Service Criteria, ensuring comprehensive protection for your data.

### Security

Information and systems are protected against unauthorized access, unauthorized disclosure of information, and damage to systems.

- Access control mechanisms
- Encryption at rest and in transit
- Intrusion detection
- Security monitoring

### Availability

Information and systems are available for operation and use as committed or agreed upon.

- 99.99% uptime guarantee
- Disaster recovery planning
- Redundant infrastructure
- Performance monitoring

### Confidentiality

Information designated as confidential is protected as committed or agreed upon.

- Data classification policies
- Access restrictions
- Secure data disposal
- Non-disclosure agreements

## What This Means for You

When you choose ATEK, you're choosing a partner that prioritizes security at every level.

### Accelerate Vendor Assessments

Skip lengthy security questionnaires. Our SOC 2 security documentation answers your procurement team's questions upfront, speeding up vendor approval.

### Satisfy Your Compliance Requirements

Whether you need to demonstrate due diligence to regulators or satisfy internal audit requirements, our SOC 2 compliance provides the evidence you need.

### Protect Your Critical Data

Your environmental monitoring data is mission-critical. Our SOC 2 controls ensure your data integrity, confidentiality, and availability.

### Trust Your Partners

When you partner with ATEK, you partner with a company that takes security as seriously as you do. Our compliance proves our commitment.

## How We Protect Your Data

Our SOC 2 compliance is built on a foundation of robust security controls.

### Data Encryption

AES-256 encryption for data at rest, TLS 1.3 for data in transit

### Access Management

Role-based access control with multi-factor authentication

### Audit Logging

Comprehensive audit trails of all system activities

### Incident Response

24/7 security monitoring with documented response procedures

### Backup & Recovery

Automated backups with tested disaster recovery procedures

### Vendor Management

Rigorous third-party vendor security assessments

## Part of Our Comprehensive Compliance

SOC 2 is just one part of ATEK's commitment to regulatory excellence.

FDA 21 CFR Part 11

[ISO/IEC 17025:2017](/content/en/compliance/iso-17025/index.html)

GAMP 5 Compliant

GxP Ready

## Frequently Asked Questions

### What is SOC 2 compliance?

SOC 2 (Service Organization Control 2) is a compliance framework developed by the American Institute of CPAs (AICPA). It evaluates an organization's information systems relevant to security, availability, processing integrity, confidentiality, and privacy. A SOC 2 Type II report provides assurance that a company's controls are designed effectively and operating over a period of time.

### What is the difference between SOC 2 Type I and Type II?

SOC 2 Type I evaluates whether security controls are properly designed at a specific point in time. SOC 2 Type II goes further by testing whether those controls operate effectively over a sustained period (typically 6-12 months). ATEK aligns with SOC 2 Type II standards, maintaining ongoing controls for security excellence.

### How does SOC 2 relate to FDA 21 CFR Part 11 compliance?

SOC 2 and FDA 21 CFR Part 11 are complementary. While FDA 21 CFR Part 11 focuses on electronic records and signatures in regulated industries, SOC 2 addresses broader information security controls. Together, they provide comprehensive assurance that your data is protected, accurate, and compliant with regulatory requirements.

### What is ATEK's SOC 2 compliance status?

ATEK maintains SOC 2 Type II compliant controls across our platform. Our security practices are aligned with the Trust Service Criteria for security, availability, and confidentiality.