| 1 minute read

Avalon Achieves SOC 2 Type 1 Compliance

compliance graphic

Avalon is proud to announce that we have successfully completed the SOC 2 Type 1 information security audit as of July 2021. The scope of the audit included our cybersecurity, eDiscovery, and secure print and mail services.

A system and organization controls (SOC) 2 report is administered by an independent accounting and auditing firm and is based on the AICPA’s Trust Services Criteria. The resulting report verifies whether a third-party service provider that holds, stores, and/or processes private data – such as Avalon – complies with a variety of requirements, including security and availability. In short, it indicates that a vendor is a trustworthy partner with rigorous policies and procedures in place.

SOC 2 Logo 21972-312_SOC_NonCPAThere are two types of audits, SOC 2 Type 1, which assesses the design of security processes at a specific point in time, and SOC 2 Type 2, which evaluates how effective security processes are by observing a company’s operations over a period of time. Avalon is currently preparing for a SOC 2 Type 2 audit.

While Avalon has been a trusted vendor to tens of thousands of clients since 2000, achieving SOC 2 Type 1 compliance is a significant achievement that demonstrates our dedication to the highest standards of security and service.

“Avalon has always made the confidentiality, integrity, and availability of our systems and client data a paramount priority for our entire team,” says Kyle Cavalieri, president of Avalon Cyber. “Every day, we work hard building and maintaining resilient systems and applications that allow us to provide the very best professional service possible for our clients. We are proud to have completed the SOC 2 audit to validate that our company’s policies, procedures, and technical controls meet the expectations of the relevant trust principles."

Contact our team if you need assistance or have any questions about our cybersecurity services.

Blog Articles

3 Signs Your Next Matter May Be a Good Fit for AI-Assisted Review

Artificial intelligence has become an important part of eDiscovery, but not every matter requires the same approach. While AI can significantly accelerate document review and improve consistency, its value depends on the nature of the data, the review objectives, and the overall case strategy.

Remote or In-Lab? A Quick Guide to Digital Forensics Collections

Not every digital forensics investigation requires a device to be shipped to a lab. In many matters, a remote logical collection (which captures active, accessible data, such as documents, emails, and text messages, rather than the entire device) can provide the information needed quickly and with minimal disruption. But in other cases, when the stakes are higher, a more comprehensive in-lab examination may be necessary. Choosing between the two comes down to the circumstances of the investigation, the device, and the evidence you need to uncover.

Why Strong Project Management is Essential to eDiscovery

eDiscovery is often described in terms of technology, data volumes, review platforms, collection methods, and workflows. But behind all of those moving parts is something just as important: Project management.