Brightly Software Achieves SOC 2 Type II Certification

At Brightly Software, we've always believed that trust is the foundation of every great customer relationship. That's why we're proud to announce that we have achieved SOC 2 Type II certification, a milestone that reflects our ongoing commitment to protecting the data our customers place in our hands.

What Is SOC 2?

SOC 2 (System and Organization Controls 2) is a voluntary compliance standard developed by the American Institute of CPAs (AICPA). It defines how organizations should manage customer data based on five Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Unlike a simple self-assessment, SOC 2 reports are issued by licensed CPA auditors, making them one of the most credible and widely recognized benchmarks for data security in the technology industry. Industry giants such as AWS and Microsoft maintain SOC 2 compliance for their cloud platforms – and now, we stand alongside them.

Type I vs. Type II: What's the difference?

There are two levels of SOC 2 certification:

• SOC 2 Type I — Evaluates whether security controls are designed appropriately at a single point in time.
• SOC 2 Type II — Evaluates whether those controls are operating effectively over a sustained period.

Brightly has achieved the higher standard Type II certification, demonstrating that our security practices aren't just well-designed on paper, but are consistently and effectively applied in practice.

Why does this matter for our customers?

In today's digital landscape, data breaches and cyber threats are an ever-present reality. Customers need more than promises; they need verified proof that their data is safe.

Our SOC 2 Type II certification provides exactly that. It confirms that we have implemented robust controls to:

• Protect customer data from unauthorized access
• Ensure the availability and reliability of our services
• Maintain the confidentiality of sensitive information

For enterprise customers in particular, SOC 2 compliance is often a prerequisite for doing business. It removes uncertainty, accelerates procurement decisions, and provides peace of mind that a trusted, independent auditor has validated our security posture.

Our commitment going forward

Achieving SOC 2 Type II is not a finish line; it's a commitment to continuous improvement. This includes renewing our SOC 2 Type II certification annually to ensure our security controls remain independently verified and effective.  

You can learn more about our security commitments and request a copy of our SOC 2 report by visiting our Trust Center.

Your data. Our responsibility. Always.