Our multi-award-winning tool Rencore Governance just received SOC 2 Type 2 accreditation!

A building is only as structurally sound as the foundations that hold it together. The same holds true for organizations. We believe in maintaining a strong core that runs throughout our organization at Rencore – culturally, from each team member all the way through to the product that optimizes cloud collaboration for our customers across their business.

Our ability to maintain our position as cloud collaboration governance leaders is supported by the stringent security and compliance practices that we have put in place from day one. We are passionate about helping customers run a secure, compliant, and performant Microsoft 365 environment, and that also manifests in our core values as an organization.

Practicing what we preach

To add external proof to our organizational value, we chose one of the most highly regarded and hard to earn security standards: SOC 2. Today, we are delighted to receive the SOC 2 Type 2 accreditation for our multi-award-winning cloud governance tool Rencore Governance. Passing the external audit objectively demonstrates the ability of Rencore Governance when continuously handling all customer data in accordance with stringent security standards. Rencore becomes one of the select few Governance SaaS providers to hold the SOC 2 Type 2 accreditation.

Matthias Einig, CEO and Co-Founder at Rencore explains:

It gives us immense pleasure to announce this achievement. I would like to thank our internal teams, who collaborated well to coordinate such a smooth process in a timely manner. SOC 2 Type 2 accreditation serves as a key milestone in ensuring the safety and security of our customer data. It is also a major step in reinforcing our commitment towards compliance.

What is the SOC 2 accreditation?

SOC 2 is an internationally recognized standard for security and compliance best practices developed by the American Institute of Certified Public Accountants (AICPA). The audit report prepared for Rencore Governance is based on the following test service criteria: security, availability, and confidentiality.

US-based independent Certified Public Accounting (CPA) firm Schneider Downs accredited the governance tool Rencore Governance in accordance with the standards established by AICPA. The firm carried out detailed evaluations on the suitability of design and operational effectiveness of controls to gauge how secure the internal processes are.

The difference between Type 1 and Type 2

While SOC 2 Type 1 accreditation evaluates processes and internal controls at a specific point in time, SOC 2 Type 2 accreditation evaluates the continued application of these processes and internal controls over a period of time. Overall, Rencore achieved both SOC 2 Type 1 and Type 2 accreditation within six months.

How Rencore secures customer data

The products that we provide our customers with are all based on well-defined security principles:

• Rencore’s system resources are protected against unauthorized access.
• The accessibility of Rencore’s system, products or services is stipulated by a contract or service level agreement (SLA).
• Rencore’s system resources are protected against unauthorized access.

Rencore Governance uses Microsoft Graph by discovering REST APIs and client libraries to access data on Microsoft’s cloud services such as Microsoft 365, Teams, SharePoint, OneDrive, Azure Exchange, Yammer, and Power Platform.

All Rencore Governance instances run in separate Azure containers. Processing data from a customer tenant happens from inside Azure Container Instances (ACI). Every ACI is isolated in the network and is uniquely deployed for each customer.

Over to you

If you want to experience the industry standard in secure cloud collaboration governance, you can try out Rencore Governance for 30 days. It’s completely free!