SOC 2 and ISO 27001 compliance
MockFlow's SOC 2 Type II and ISO 27001 certifications, the SOC 2 audit now under way, and how to request reports for a vendor review.
Security and procurement teams often ask whether MockFlow holds independent certifications. MockFlow was previously certified for both SOC 2 Type II and ISO 27001, and a new SOC 2 Type II audit is under way now.
SOC 2 Type II
SOC 2 is an audit standard for how a service provider protects customer data. A Type II report goes further than a point in time check: an independent auditor tests that the security controls work over a period of months.
Previous certification: MockFlow held a SOC 2 Type II report.
Current status: a new SOC 2 Type II audit is in progress, and MockFlow expects the new report early in 2027.
ISO 27001
ISO/IEC 27001 is the international standard for an information security management system: the policies, risk assessments and controls an organization uses to keep information secure. MockFlow was previously certified for ISO 27001.
SOC 2 certified infrastructure
Independent of MockFlow's own audits, customer data is hosted only on SOC 2 certified infrastructure, such as Amazon Web Services and MongoDB. See Where your data is stored and how it is backed up.
Request compliance reports
Customers can request the earlier SOC 2 Type II and ISO 27001 reports for a vendor or security review. Email support@mockflow.com with your company name and what your review needs. See Security reviews and contacting MockFlow.