Today we’re excited to announce that we have successfully completed the System and Organizational Controls (SOC) 2 Type 1 examination resulting in a CPA’s report stating that management of ngrok, inc. maintained effective controls over the security of the Ngrok Secure Introspectable Tunnels System. A widely recognized auditing standard developed by the American Institute of Certified Public Accountants (AICPA), a SOC 2 report is designed to meet the needs of existing or potential customers who need assurance about the effectiveness of controls used by the service organization to process customers’ information. The engagement was performed by BARR Advisory, P.A.
Since the earliest days at ngrok, Alan Shreve, ngrok’s founder and CEO, has had a vision to empower developers to simplify the internet. At a practical level, that meant fine-grained access control and port management but at a fundamental level, it meant trust built into the system from end to end. Ngrok’s SOC2 Type 1 report is the first step of many we will take to build this trust with our customers and community.
To ensure ngrok continues building on this strong, stable foundation, we’ve hired Arianna Willett to establish and grow our Security, Risk, and Trust program. Previously, she has held leadership roles in Governance, Risk, and Compliance at both Okta and Twilio, guiding and shaping security and compliance policy at both organizations.
Current and prospective enterprise customers can obtain a copy of our SOC 2 Type 1 report through their Sales contacts.
ABOUT BARR Advisory
BARR Advisory is a cloud-based security and compliance solutions provider, specializing in cybersecurity and compliance for Software as a Service (SaaS) companies. A trusted advisor to some of the fastest growing cloud-based organizations around the globe, BARR simplifies compliance across multiple regulatory and customer requirements in highly regulated industries including technology, financial services, healthcare, and government.