SOC 2 · Resend

What is SOC 2?

SOC 2 is an audit report developed by the American Institute of CPAs (AICPA).

The audit evaluates controls related to security, availability, processing integrity, confidentiality, and privacy of a system.

There are two types of SOC 2 reports:

Type I: checks if a company is compliant at a point in time.
Type II: confirms that a company is still compliant during an observation window (typically 6 months).

Resend is SOC 2 Type II compliant.

SOC 2 is not mandatory in a legal sense, and certification isn't required by law.

Still, we believe that SOC 2 is crucial because it encourages companies to have solid controls in place to protect customer data.

For us, this isn't a short-term growth play but the beginning of a long-term security investment.

The auditing was done by Advantage Partners which has a track record of partnering with many SaaS companies.

Resend also uses Vanta to monitor, collect, and submit evidence to auditors.

The reporting period is from August 1, 2023 to February 1, 2024.

You can download a copy of the report on the Documents page.

If you have a questionnaire that needs filling, please contact us.