Keepit Achieves SOC 2 Type 1 in a Pivotal Move Toward Full SOC 2 Compliance

Keepit A/S, a vendor-independent cloud dedicated to SaaS data protection, announced it has successfully achieved its SOC 2 Type 1 attestation report. This accomplishment reinforces Keepit’s commitment to the highest standards of security, availability, confidentiality and privacy. 

The SOC 2 Type 1 report, developed by the American Institute of certified Public Accountants (AICPA), evaluates the design of an organization’s internal controls related to key trust service principles at a specific point in time. This milestone provides assurance to customers that Keepit’s security practices and controls are effectively designed to safeguard data – and meet industry expectations for enterprise-level protection. 

“Achieving SOC 2 Type 1 attestation is a significant step forward in demonstrating our commitment to transparency, trust, and continuous improvement in how we protect customer data,” said Kim Larsen, CISO, Keepit. “It’s a milestone that many of our customers – and prospects – have asked for, and we’re proud to deliver.”

To complete the attestation, Keepit’s Information Security and Legal teams worked closely with contributors from across the organization, including People and Culture, Quality Assurance, Delivery, Operations, Internal IT, and SOC teams. Together, they implemented and validated 108 distinct controls – covering the security and integrity of Keepit’s systems and processes. 

“Our success was a true cross-team effort,” added Larsen. “It’s a reflection of our commitment to protecting what matters most to our customers: their data.”

The SOC 2 Type 1 achievement builds on Keepit’s ISO 27001 certification and further strengthens its position as the trusted choice for organizations seeking proven data protection and regulatory alignment. The next step is achieving the SOC 2 Type 2 report – a process already underway.

Customers, partners, and auditors can request access to the SOC 2 Type 1 report through Keepit’s Customer Success and Support teams. 

For more information, read the blog post by Information Security Analyst Viktoriia Hres.