Certifications
PostAuth Achieves SOC 2 Type II Attestation and HIPAA Compliance Certification
Published
Demonstrates operational commitment to the highest levels of data security, privacy, and compliance.
New Albany, OH – November 08, 2024—PostAuth, the leading data-centric security management platform for managing security at the file level across hybrid environments, announced today that it has achieved SOC 2 Type II attestation in accordance with the American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations, also known as SSAE 18. Achieving this standard with an unqualified opinion serves as third-party industry validation that PostAuth provides enterprise-level security for customers’ data secured in the PostAuth platform.
Additionally, PostAuth has received HIPAA compliance certification, in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) regulation for the handling of protected health information (PHI) for data security and privacy.
The PostAuth platform is revolutionary in how it fills the gaps in perimeter security architecture by bringing security down to the individual file level while at rest, in transit, and in use—all while being completely transparent to users. This provides automatic data security instead of reliance on an employee’s security process adherence. It also enables secure file sharing and collaboration, both internally and with third parties, without changes to existing workflows. PostAuth’s patented approach to data-centric security makes ransomware attacks futile. Even if data is exfiltrated, FIPS 140-2 encryption renders the data as pure cipher text, and therefore unreadable and unusable to cybercriminals. The company’s solution is an ideal fit for ransomware-prone organizations and heavily regulated industries such as healthcare, financial services, legal services, or suppliers working with the DoD and requiring CMMC certification.
“Protecting our customers’ sensitive data has always been the backbone of our solutions,” said Tom Kwon, chief executive officer at PostAuth. “Completing our SOC 2 Type II attestation is a significant milestone and reinforces our unwavering dedication to ensuring the highest level of processes and controls are in place and that our solutions are enterprise-ready.”
PostAuth also received its HIPAA compliance designation for its inherent security measures and safeguards that protect PHI data. These capabilities ensure the secure handling of sensitive healthcare data between organizations and their partners.
“As a data-centric security company, security and privacy are always top of mind operationally,” stated Harihara Varma Indukuri, chief technology officer and co-founder of PostAuth. “Ensuring that the capabilities and compliance of our solutions match our end-users and third-party partner requirements are key initiatives we continually address. Our inherent encryption at the file level ensures data is only accessible as authorized and always protected across its lifecycle.”
PostAuth was audited by a security and compliance attestation leader for B2B, SAAS companies worldwide. Prescient Assurance is a registered public accounting firm in the US and Canada and provides risk management and assurance services, which include SOC 2, PCI, ISO, NIST, GDPR, CCPA, HIPAA, and CSA STAR. For more information about Prescient Assurance, please contact the company: [email protected].
An unqualified opinion on a SOC 2 Type II audit report demonstrates to PostAuth’s current and future customers that they manage their data with the highest standard of security and compliance.
About PostAuth
PostAuth removes the complexities of data security management, ensuring continuous protection of sensitive data and collaboration without compromise. File-level encryption creates a self-protecting perimeter that follows the data—at rest, in transit, or in use. The PostAuth platform embeds zero-trust, data-centric security into any file using a patented combination of military-grade FIPS-validated encryption and multifactor access controls. PostAuth integrates effortlessly with existing workflows, eliminating user friction and easing compliance. Whether on-premises, in the cloud, or across multi-cloud environments, PostAuth delivers comprehensive protection that helps meet regulatory mandates like CMMC, mitigates insider threats and ransomware, and supports data governance.