# SOC 2 and ISO 27001 compliance

> MockFlow's SOC 2 Type II and ISO 27001 certifications, the SOC 2 audit now under way, and how to request reports for a vendor review.

Source: https://mockflow.com/docs/soc-2-and-iso-27001-compliance

Security and procurement teams often ask whether MockFlow holds independent certifications. MockFlow was previously certified for both SOC 2 Type II and ISO 27001, and a new SOC 2 Type II audit is under way now.

![SOC 2 Type II: previously certified, a new audit under way, and a new report expected early next year. ISO/IEC 27001: previously certified. Certified infrastructure: customer data only on SOC 2 certified infrastructure such as Amazon Web Services and MongoDB](https://assets.mockflow.com/docs/media/71e9eb0700cf4839bf54ac5348ec43a7.webp)

## SOC 2 Type II

SOC 2 is an audit standard for how a service provider protects customer data. A Type II report goes further than a point in time check: an independent auditor tests that the security controls work over a period of months.

- **Previous certification:** MockFlow held a SOC 2 Type II report.
- **Current status:** a new SOC 2 Type II audit is in progress, and MockFlow expects the new report early in 2027.

## ISO 27001

ISO/IEC 27001 is the international standard for an information security management system: the policies, risk assessments and controls an organization uses to keep information secure. MockFlow was previously certified for ISO 27001.

## SOC 2 certified infrastructure

Independent of MockFlow's own audits, customer data is hosted only on SOC 2 certified infrastructure, such as Amazon Web Services and MongoDB. See [Where your data is stored and how it is backed up](/docs/where-your-data-is-stored).

## Request compliance reports

Customers can request the earlier SOC 2 Type II and ISO 27001 reports for a vendor or security review. Email **support@mockflow.com** with your company name and what your review needs. See [Security reviews and contacting MockFlow](/docs/security-reviews-and-contact).

## Next steps

- [Security at MockFlow](/docs/security-at-mockflow)
- [Privacy and your personal data](/docs/privacy-and-your-personal-data)