Ostorlab Completes SOC 2 Type II Audit for Commitment to Security and Data Protection

Update, September 2026: Ostorlab's current SOC 2 Type II report covers the Security criteria for the period 18 Nov 2024 – 18 Apr 2025. SOC 2 is an attestation report issued by an independent auditor, not a certification.

We are excited to announce that Ostorlab, the leading provider of mobile application security solutions, has successfully completed its SOC2 Type 2 audit, performed by Prescient Assurance.

For those who are unfamiliar with SOC2, it is a widely recognized attestation standard under which an independent auditor evaluates whether a service provider's controls meet selected AICPA Trust Services Criteria, such as Security. The SOC2 audit process involves an in-depth review of a company's policies, procedures, and systems to evaluate their effectiveness in meeting these standards.

Completing the SOC2 Type 2 audit is a significant milestone for Ostorlab, as it demonstrates our commitment to providing our customers with the highest levels of security and data protection. The resulting report serves as an independent validation of our security posture and provides assurance to our customers that we are following industry best practices.

The audit was conducted by Prescient Assurance, a leading provider of SOC2 audit services. During the audit, Prescient Assurance evaluated our controls and processes related to the Security criteria. The audit process involved an extensive review of our policies and procedures, as well as a detailed assessment of our infrastructure and systems.

After completing the audit, Prescient Assurance issued a SOC2 Type 2 report that verified our compliance with the Security trust services criteria. At the time, the report was made available to our customers upon request, providing them with additional assurance that we are committed to maintaining the highest levels of security.