Lano Updates
Author
Lano Team
Date published
May 10, 2024
Exciting news! Lano is now officially SOC 2 type II certified. The certification reiterates how dedicated we are to complying with the highest security standards to keep customer data safe.
Read on to find out what the certification means for Lano, our clients, and our mission to provide top-tier payroll and employment services.
SOC 2 is a compliance framework that is used for assessing service organizations on their information security standards and practices. The certification was developed by the American Institute of CPAs (AICPA) and is based on a thorough assessment of five different trust services criteria, which are security, availability, processing integrity, confidentiality, and privacy.
In order to get a SOC 2 report, businesses must undergo a voluntary audit which scrutinizes the security, availability, and processing integrity of the systems which the organization uses to process customer data. Data confidentiality and privacy standards are also assessed.
There are two different types of SOC 2 reports which are called “SOC 2 type I” and “SOC 2 type II”, respectively. Type II is generally considered to be more demanding, since it requires businesses to pass a 3-month observation period and show continuous effort and dedication to enhancing their security standards.
The main difference between SOC 2 type I and SOC 2 type II is that the latter assesses the security of systems and processes over an extended period of time, while type I evaluates system and process security at a single point in time.
In other words, a SOC 2 type I report checks whether a service organization’s systems are designed to ensure safe data processing. A SOC 2 type II report takes the assessment one step further by evaluating whether the implemented control mechanisms work as intended.
At Lano, we want to provide our customers with the highest security standards so they can have peace of mind. Achieving SOC 2 type II compliance is an important step towards optimizing the security of our systems and processes.
“Completing the SOC 2 type II report shows our commitment to providing enterprise-level security to our customers. It is an internationally recognized certification that attests to the highest level of security and compliance,” says Markus Schünemann, Founder & CTO at Lano.
There is no legal obligation for service organizations to be “SOC 2”-certified, but the certification is a highly regarded standard which shows customers that their data is in safe hands. This has always been our top priority.
Employee and payroll data is highly sensitive, which is why many businesses are hesitant to entrust their data to third-party services. The completion of the SOC 2 type II certification underlines Lano’s determination to keep customer data secure and well-protected.
“For Lano customers, the SOC 2 type II report means peace of mind. Businesses that contract Lano’s global payroll and employment services can be assured that their data is in safe hands,” Markus Schünemann concludes.
Unify and streamline global payroll
Set up payroll in new locations
Compliantly hire employees in 170+ countries
Pay global teams at low cost
We not only want to provide our customers with high-quality services, but to also assure them that they don’t have to worry about their data when using our global payroll and employment solutions.
When businesses choose Lano for hiring, managing, and paying their global workforce, we want them to feel confident that their information and data is safe. That’s why we have put a lot of work and effort into building robust systems and processes that meet the highest security standards.
We are highly aware of the fact that our customers entrust their sensitive data to us, and we don’t take this responsibility lightly. Data security is one of our guiding principles at Lano, and we will continue to optimize our systems and processes.
Completing the SOC 2 type II report is a huge accomplishment which took three months of in-depth preparation and three months of close observation and monitoring. All this wouldn’t have been possible without our amazing team who worked tirelessly to reach this important milestone. Shoutout to the SOC 2 project team for doing such a great job!
However, security at Lano doesn’t end with SOC 2 type II compliance. Ensuring the highest security standards for our clients is a continuous task and we are determined to keep improving our systems and processes in this regard.
WRITTEN BY
Sign up for our monthly newsletter and get regular updates on new products, integrations, and partners. Stay up to date with our blog, podcast, industry news, and many more resources.
© Lano Software GmbH 2024
English
Français
Deutsch
Español