Info Tech®, Inc., a leader in infrastructure construction software solutions and expert statistical and econometric consulting, announced today it received System and Organization Controls (SOC) 2 Type 2 certification for its products and services. Obtaining SOC 2 Type 2 reports is an industry goal for software as a service (SaaS) companies to demonstrate data and privacy security capabilities.
The SOC 2 Type 2 report was issued by an external auditing firm, Brown Smith Wallace, and assesses Info Tech’s compliance based on set criteria for managing customer data. The report outlines Info Tech’s controls relevant to two key areas: security and availability. While a SOC 2 Type 1 report describes if a company’s system is capable of prioritizing the key areas, the SOC 2 Type 2 report details the operational effectiveness of the company’s systems.
“Our software customers need detailed information and assurance around our data and security procedures, and the SOC 2 Type 2 report demonstrates Info Tech’s commitment to establishing and following a set of controls designed to keep data secure,” Jeff Hoover, Senior Director of IT, said. “Many industries require this report to demonstrate a proven track record of consistency and quality, so it was imperative for us to earn this certification.”
Info Tech received a SOC 2 Type 2 report for its owned products in addition to a report covering the services it provides as a contractor for the AASHTO owned product, AASHTOWare Project™.
The Info Tech report covers:
- Bid Express®
- Doc Express®
- Info Tech Express
The AASHTOWare Project™ report covers:
- AASHTOWare Project Hosting
- AASHTOWare Project SYNC Service™
- AASHTOWare Project Data Analytics™
Brown Smith Wallace partnered with Info Tech to design controls to match the SOC 2 Type 2 required standards and work within the company’s unique operating environment. Info Tech received its SOC 2 Type 1 report on July 31, 2018, a first step in the SOC 2 Type 2 report process, before the auditing firm evaluated Info Tech’s controls from December 1, 2018 to May 31, 2019. SOC 2 Type 2 is an annual report, so Info Tech will seek another certification in 2020.
“SOC 2 Type 2 compliance is not a requirement, but it was a priority for us because it is another way we can demonstrate how much we value our customers,” Hoover said. “The importance of securing our data and our customers’ data cannot be overstated. Achieving this recognition proves our ongoing dedication to operational security and gives our customers peace of mind that their data is secure with Info Tech.”
About Info Tech, Inc.
Info Tech consists of two core businesses: Info Tech Systems and Info Tech Consulting. Info Tech Systems develops cutting-edge digital solutions to support paperless environments and e-Construction initiatives through automated infrastructure construction management and Internet bidding solutions. Info Tech Consulting provides expert statistical and econometric litigation consulting services and support. With a diverse workforce and collaborative, relaxed environment, Info Tech is a Gainesville-born pioneer of innovation, committed to its family of employees, customers and community. For more information, visit www.infotechfl.com or www.infotechconsulting.com.