Start-Up Spanning Achieves SSAE 16 Audit Type 2 Compliance

Spanning Cloud Apps Inc., the makers of Spanning Backup for Google Apps, has completed the Statement on Standards for Attestation Engagements (SSAE) No. 16, Type 2 audit process, making it the only Google Apps backup provider to do so.

Effective immediately, Spanning is SSAE No. 16 Type 2 compliant, certifying the operational effectiveness of the company’s systems. The company achieved Type 1 compliance in June, 2012, certifying the suitability and security of its systems architecture design.

Third-party audit firm Holtzman Partners – specialists in Internal Control audits whose customers include publicly-held and private technology, service and software-as-a-service companies – recently issued a report stating that the controls Spanning has implemented to prevent, detect and correct errors or omissions in the information it provides to customers meet the AICPA’s security standards for Type 2 certification. The areas of examination include infrastructure, software, employees, procedures and data handling.

"Completing the SSAE 16 Type 2 audit process is a testament to Spanning’s commitment to data security, privacy principles and operational excellence. Spanning Backup is the only backup solution for Google Apps to have undergone such a rigorous process. Spanning customers can confidently trust that their data is safe and secure with us," said Charlie Wood, founder and CEO, Spanning. "As we continue to enhance our service and introduce new products, we are committed to completing third party security audits to demonstrate our ability to exceed the demands of safely handling and protecting our customers’ enterprise-scale data. If your business is powered by Google Apps, Spanning is the responsible choice for protecting your data."

Spanning’s products are architected and certified to serve both domestic and international customers. Prior to completing the SSAE 16 audit process, Spanning achieved certification with the U.S.-E.U. Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework, as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries and Switzerland.

The company has also been awarded TRUSTe’s Privacy Seal signifying that its privacy policy and practices have been reviewed by TRUSTe for compliance with TRUSTe’s program requirements including transparency, accountability and choice regarding the collection and use user information.

"It is important for businesses that outsource IT operations, such as data backup, to cloud-based vendors to take audits of this rigor into consideration when selecting a service provider. And similarly, cloud-based vendors should actively be demonstrating their risk management precautions and accountability to customers," said John Moellenberg, partner, Holtzman Partners. "We commend Spanning for their continued commitment to operational excellence, for submitting their employees and services to onerous examination and for ensuring that their product adheres to the highest standard of security, privacy and reliability."