BoostUp achieves SOC 2 Type II Certification.

At BoostUp, security is foundational. It is a fundamental part of our platform and is essential to our business. Since we are a revenue intelligence platform, we analyze and process sensitive data – revenue data, call data, activity data – for our customers. Our customers trust us with their sensitive data, and we shoulder the responsibility to ensure the security, confidentiality, and integrity of their data. It is not a responsibility that we take lightly. We have always prided ourselves on having the most robust security safeguards and being extremely responsive to our customers’ special security requirements.

And today, we are thrilled to announce that BoostUp is SOC2 Type II compliant! It is a significant security milestone for a young company like ours and culminated in several months of hard work by the security, operations, and engineering teams. This further solidifies our already strong security posture.

Anyone who has gone through a SOC2 audit and come out unscathed knows how comprehensive and exacting this process is. When you start, it feels incredibly daunting. It feels like you have an impossibly long list of things to do and controls to add. This is where Vanta was a great partner for us. 

We were introduced to Vanta back in November 2019, and right away, it seemed like the perfect fit for a fast-growing startup like ours. It allowed us to connect our core systems – AWS, JIRA, GSuite, Datadog, etc. – and converted the laundry list of SOC2 requirements into a clear set of tasks that we could then track/assign and plan for. It transformed a vague goal of “We want to get SOC2 certification” into a concrete 3-month plan. Once we were ready for our audit, Vanta introduced us to the independent auditor firm of Dansa D’Arata Soucia LLP, which was a perfect fit for us, having worked with fast-moving start-ups such as ours. Given that we were in the pilot and commercial discussions with several enterprises, we chose the option of completing a SOC2 Type I audit first, followed by a SOC2 Type II audit that typically requires a longer observation window. We received our SOC2 Type II compliance certification in September 2020. The overall time frame from starting the SOC2 process and receiving our Type II certification was a relatively painless ten months. I highly recommend both Vanta and Dansa D’Arata Soucia LLP.

If you are a startup selling into B2B enterprises, think of SOC2 certification as a key piece of your marketing/sales collateral. The process of going through a SOC2 audit will force you to create a comprehensive set of documentation that will help you with significantly speeding up the (now essential) vendor security and legal review process. It will ensure you put your best foot forward when getting into any security review. “BoostUp provides enterprise-grade security that customers trust,” said Lee Rayl, BoostUp customer and Security Program Manager at Degreed. “In the many security reviews I have done in my career, BoostUp was the fastest, most transparent, no BS security review I have ever gone through. The team genuinely understands the importance of security. The whole process was seamless, the team was attentive and responsive, and we completed the entire security review in 2 business days – a record for sure!”

That’s the experience we want and strive to achieve for each and every one of our customers.