We completed our SOC 2 Type 2 audit. Here's what it covers.

SparkGrid Software has completed its SOC 2 Type 2 audit. Our independent auditor, Modern Assurance, tested our controls in live operation from April 1 to June 30, 2026, against the Security Trust Services Criteria — the evidence trail our customers in healthcare, financial services, defense, and legal deserve.

When we set out to build Box Connector, we knew the customers we wanted to serve — regulated industries where data handling isn’t a feature request, it’s a legal and ethical obligation. That conviction has shaped every product decision we’ve made, and it’s what brought us to this milestone.

SOC 2 Type 1 came first. That was a point-in-time attestation: an independent auditor examined our controls — how we handle access, change management, availability, incident response, and data integrity — and confirmed that our security posture was real, documented, and designed as intended.

What this means for our customers

“Your security team can stop asking — and start reviewing the report.”

Type 2 goes further. It isn’t something you earn in a day. It’s an audit spanning months of live operations — auditors checking that your controls work in the real world, through real changes and real access requests. It’s harder to fake and more valuable to hold.

We worked with Modern Assurance as our audit partner for Type 2. The observation window ran from April 1 to June 30, 2026, and the audit is complete.

Complete

SOC 2 Type 1 audit

Controls designed as intended, per independent audit. Point-in-time attestation complete.

Complete

SOC 2 Type 2 observation period

Modern Assurance tested our Security controls in live operation from April 1 to June 30, 2026.

Complete

Type 2 report issued

Available under NDA for customers and prospects across regulated industries.

For the teams evaluating Box Connector for their HubSpot-to-Box integrations — in financial services, healthcare, legal, or defense — this report is your starting point. Our SOC 2 Type 2 report is available under NDA from our Trust Center. If you’re deep into a security review, reach out and we’ll get it in your hands.

Security isn’t a checkbox for us. It’s part of the product. We’ll keep building accordingly.

Questions about our security posture?→security@sparkgridsoftware.com