Chargeflow receives SOC 2 Type 1 compliance certification

The audit preceding the certification was conducted by Dansa D’Arata, who leveraged Vanta, an automated compliance and security platform to verify that Chargeflow’s business practices, security protocols, and data policies are complaint with strict trust principles related to security, availability, processing integrity, confidentiality, and privacy.

Audit process for the SOC 2 certification and Chargeflow offering

With ecommerce fraud rates continuously increasing, merchants who leverage Chargeflow or wish to do so for chargebacks’ automation and recovery have the company’s commitment to offering interactions between organisations and their prospects in a safe and secure manner ensured. 

As per information provided in the company’s press release, the independent auditing process comprised a detailed examination of Chargeflow’s policies and methodologies related to customer data handling, an evaluation of its internal control systems, employee interviews, as well as an in-depth review of the company’s digital platform and connected tools. 

Understanding SOC 2 and Chargeflow’s future plans

Developed by the American Institute of Certified Professional Accountants (AICPA), the SOC 2 framework is an internal auditing procedure. This audit is to report how organisations securely manage business-critical information and client privacy. The auditing is carried out by a third party and generates reports that are unique to the organization. 

Looking to further improve its service security, Chargeflow is in the process of obtaining SOC 2 Level 2, GDPR, and CCPA compliances, in addition to the SOC level 1 validation.