Compliance
We are committed to maintaining the highest standards of compliance and regulatory adherence. Learn about our certifications and compliance frameworks.
SOC 2 Type 1
In ProcessCurrently undergoing SOC 2 Type 1 certification process. Expected completion: Q2 2026
SOC 2 Type 1 (In Process)
We are currently undergoing the SOC 2 Type 1 certification process. SOC 2 (Service Organization Control 2) is a framework for managing data security, availability, processing integrity, confidentiality, and privacy.
What This Means:
- We are working with an independent auditor to assess our controls
- Our security, availability, and confidentiality controls are being evaluated
- We expect to complete certification in Q2 2026
- We will publish our SOC 2 Type 1 report upon completion
Status: In Process - Expected completion Q2 2026
Compliance Frameworks
We align our practices with multiple compliance frameworks to ensure comprehensive data protection and security.
Frameworks We Follow:
- GDPR: General Data Protection Regulation compliance
- CCPA: California Consumer Privacy Act compliance
- SOC 2: Security, availability, and confidentiality controls
- ISO 27001: Information security management principles
- NIST: Cybersecurity framework alignment
Audit Information
We conduct regular audits and assessments to ensure ongoing compliance with our security and privacy commitments.
Our Audit Process:
- Annual third-party security assessments
- Regular internal security audits
- Penetration testing and vulnerability assessments
- Compliance reviews and gap analyses
- Continuous monitoring and improvement
Third-Party Assessments
We work with independent third-party auditors and security firms to validate our security and compliance posture.
- Independent security audits
- Third-party penetration testing
- Compliance assessments
- Vendor security reviews
Regulatory Compliance
We ensure compliance with applicable laws and regulations in the jurisdictions where we operate.
Areas of Compliance:
- Data protection regulations (GDPR, CCPA)
- Industry-specific regulations
- Financial regulations (where applicable)
- Export control and trade compliance
- Employment and labor laws
Request Compliance Documentation
Customers and partners can request compliance documentation and audit reports (where available) by contacting us.
Contact: compliance@toolswift.ca
Please note that SOC 2 reports are available to customers under NDA upon completion of certification.