Woohoo! 🎉

We are excited to share The Lookout Way was been awarded with a SOC2 Type II attestation report by an independent auditor, AssuranceLab. This report is the culmination of a two-year journey that demonstrates our promise to protecting customer data through the successful implementation of robust security controls.

What is SOC 2 Type II?

Service Organisation Control 2 (SOC2) is an information security framework for assessing an organisation’s ability to implement and maintain strong controls to protect data based on trust services criteria:

• Security: Protection of system resources against unauthorised access
• Availability: The system is available for operation and use
• Confidentiality: Information designated as confidential is protected

This attestation is awarded after an independent examination of both the design and operational effectiveness of controls. There are two types of reports:

• Type I: Evaluates whether security and privacy controls are well-designed at a specific point in time.
• Type II: Goes further by assessing the consistent application and effectiveness of these controls over time, typically spanning three to twelve months.

Conformance to SOC2 is commonly adopted by Software as a Service vendors such as The Lookout Way. Many of the vendors we engage ourselves conform to the same security information security framework.

What this means for our customers

At The Lookout Way, ensuring security isn’t just a compliance ticking exercise — it’s a core promise to our customers. Achieving SOC2 Type II demonstrates our systems and processes meet industry standards and gives customers confidence in the safety and reliability of our platform.

We deeply appreciate your continued trust and partnership. While this achievement is a significant milestone, it’s only the beginning. We remain committed to continuously enhancing our information security programme and being regularly examined by an independent auditor.

Visit our Trust Centre to learn more about information The Lookout Way’s information security programme, including copies of our policies and independent reports.