Q&A: The importance of compliance programs like SOC 2

Q: What is SOC2 compliance?

The American Institute of Certified Public Accountants (AICPA) developed the SOC 2 (Service Organization Control 2) set of standards and guidelines to provide a framework for assessing and reporting on a company’s controls relating to security, availability, processing integrity, confidentiality, and privacy of customer data. The SOC 2 standards are intended to assist service organizations (such as cloud providers, SaaS businesses, and managed service providers) in assuring their stakeholders and clients that they have put in place the necessary safeguards to protect sensitive data.

Q: Why is SOC 2 compliance important to Block Clinical?

SOC 2 compliance demonstrates that Block Clinical has adequate controls in place to protect the security, privacy, and confidentiality of customer data. By achieving SOC 2 compliance, we can provide assurance to our customers that we’ve implemented appropriate controls to safeguard their sensitive information.

Block Clinical expects to complete SOC 2 audit and achieve certification by the end of Q2, 2023.