Breadwinner is SOC 2 Certified and More Secure Than Ever

What is SOC 2 Certification?

SOC 2 (AKA “System and Organizational Controls 2”) is a well-known and well-respected security standard. It was developed by the American Institute of CPAs (AICPA) to evaluate the data security controls of SaaS and cloud-computing vendors. 

The SOC 2 framework includes standards and best practices for managing and protecting customer data based on the five “trust service principles” of security, availability, processing integrity, confidentiality, and privacy.

SOC 2 certification involves a thorough audit by an independent security consultant. Nothing is off-limits. 

Auditors look at documented security procedures – and how well companies implement the controls they’ve developed.  They consider access controls, multi-factor authentication, firewalls, encryption, monitoring, attack detection, incident handling, disaster recovery plans, testing procedures, and other factors that affect customer data security.

As a result, if a technology company achieves SOC 2 Certification, you can be fully confident that their security is top-notch and that they’re doing everything possible to keep your data safe and secure.

A Few Thoughts on the Need for Data Security Standards Like SOC 2

Thanks to technology, you can connect with people all over the world, run a thriving business from your dining room table, and use data to gain customer and competitor insight previous generations of business leaders only dreamed about.  

But ambitious entrepreneurs and company leaders aren’t the only ones who are thrilled by the possibilities of digital business.  All that data floating around in the cloud attracts cyber criminals who constantly search for security weaknesses they can exploit.

Unfortunately, hackers and other cyber attackers tend to be smart, devious, and persistent. 

To fend off their clever attacks, you have to constantly monitor your own systems and trust that the third-party integrations, SaaS products, and APIs you use don’t introduce hidden security vulnerabilities.

As a SaaS vendor and a SaaS user, we wrestle with this issue from both sides. 

Everyone says their products are 100% secure. But how do we really know? And how do we prove to our customers that they can trust us with their financial data?

Our answer is to embrace data security standards like SOC 2. SOC 2 Certification is completely voluntary. It’s not mandated by law, but it’s also not easy to achieve. The process is rigorous and time-consuming, but the resulting data security validation is more than worth the time and effort – to our customers and us.

Breadwinner’s Journey to SOC 2 Certification

Security has always been a top priority at Breadwinner. Our products integrate Salesforce with finance software like QuickBooks, Xero, and NetSuite and payment processors like Stripe and Square. 

Customers trust us to help them get more value from their financial data – and to keep it secure. Because Breadwinner products are Salesforce-native, they inherit the best-in-class security features of Salesforce. 

That’s a huge benefit, but we’ve never just relied on Salesforce to keep our products secure. We take our data security responsibility very seriously and have gone above and beyond with our security procedures since Day 1.

However, Breadwinner has been growing lately – working with more customers and bigger businesses. Earlier this year, our leadership team decided to officially take our security commitment to the next level by pursuing SOC 2 certification. 

We wanted to provide customers with both peace of mind and objective proof that Breadwinner’s data security is truly excellent – and to confirm that we were leaving no stone unturned in our efforts to protect customers’ critical financial data. 

Breadwinner CEO Curt Hopmann and VP of Development Mike Honekamp led our SOC 2 certification effort. We partnered with Vanta, the leader in continuous compliance monitoring, to navigate the process and gather everything required for the official SOC 2 compliance audit. 

And, well, we’ve already told you how it all turned out – we passed our audit and achieved our goal of SOC 2 certification! 

But that’s not the end of the story. SOC 2 certification isn’t a one-and-done thing. We’ll keep working with Vanta to conduct continuous security monitoring and periodic audits. Internally, we’ll hold regular security review meetings to ensure we maintain the highest level of data security.

And Breadwinner customers can rest easy knowing their sensitive financial data and customer information is safe, secure, and protected from the bad actors of the digital world.

Want to Know More About Our Highly Secure & Incredibly Useful Financial Data Integration Solutions?

Awesome! We’d love to hear from you.

Get in touch to book a demo, get started with a free trial, or set up a discussion with our friendly product team.

Not ready for a demo, discussion, or free trial? 

No problem. Check out our products first, and then reach out with your questions. We’ll be happy to help you get the answers you need.