Caldera has completed its SOC 2 Type II audit. Advantage Partners, an independent CPA firm, examined our security controls and issued an unqualified opinion, meaning it found them designed and operating effectively.
A Type II report goes further than confirming that controls exist on paper. The auditor tests how they work over a period of months: how we grant and review access, how changes reach production, how we monitor our systems and respond to incidents, and how we protect the data agencies bring to Mesa.
Most agencies ask about SOC 2 during their security review, and we’re glad to be able to hand them the report. It’s available under NDA through our trust center, and our security page describes how we host and protect customer data.