Welcome!

News Feed Item

Zoho Completes Service Organization Controls 2 (SOC 2) Report Under AT Section 101

Zoho today announced that it has recently completed its Service Organization Controls 2 (SOC 2) examination under AT Section 101, Attest Engagements (AICPA, Professional Standards) for the period Feb. 1, 2014 through April 30, 2014. The examination was performed by an independent auditing firm.

Completion of the SOC 2 Type II examination indicates that selected Zoho processes, procedures and controls have been formally evaluated and tested by an independent accounting and auditing firm. The examination included the company’s controls related to the Trust Services Principles and Criteria of Security and Privacy.

“Data security and privacy are top priorities for Zoho,” said Raju Vegesna, evangelist at Zoho. “Completing our SOC 2 examination reaffirms that we are employing the highest level of security to keep user’s data safe and private.”

An SOC 2 examination is performed in accordance with AT Section 101, Attest Engagements (AICPA, Professional Standards). SOC 2 is designated as an acceptable method for a user entity’s management to obtain assurance about service organization internal controls over Security and Privacy without conducting additional assessments.

An SOC 2 examination is widely recognized because it represents that a service organization has been through an evaluation of their control activities as they relate to the applicable Trust Services Principles and Criteria. A Type II report not only includes the service organization’s system description but also includes detailed testing of the design and operating effectiveness of the service organization's controls.

For more information on Zoho, visit http://www.zoho.com. To get breaking Zoho news, follow the company on Twitter at @zoho and on Facebook at http://www.facebook.com/zoho. The latest news about Zoho products is available on the company blog, http://blogs.zoho.com.

Additional Zoho Resources

Zoho news releases: http://www.zoho.com/in-the-news.html
Zoho videos: http://youtube.com/zoho
Zoho blogs: http://blogs.zoho.com
Zoho on Twitter: http://www.twitter.com/zoho
Zoho on Facebook: http://www.facebook.com/zoho

About Zoho

Zoho is a comprehensive suite of online productivity, collaboration and business applications for businesses of all sizes. Over ten million users rely on Zoho apps. Zoho’s productivity and collaboration applications include Email Hosting, Document Management, Office Suite, Project Management and more alongside a host of business applications ranging from CRM and Campaign Management to Customer Support, Accounting and more. These applications are offered directly via Zoho.com or through hundreds of partners in the Zoho Alliance Partner Program. For more information about Zoho, please visit http://www.zoho.com/.

Zoho is a division of Zoho Corp., a privately-held and profitable company. With U.S. headquarters in Pleasanton, CA and offices in Austin, Chennai, London, Tokyo and Beijing, Zoho Corp. serves the technology needs of millions of customers worldwide. For more information about Zoho Corp., please visit http://www.zohocorp.com.

All brand names and product names are trademarks or registered trademarks of their respective companies.

Tags: Zoho, Service Organization Controls, SOC 2, AICPA, AT Section 101, Attest Engagements, online applications, online productivity, online collaboration, online office suite, mobile, security, privacy, business applications, email, documents, presentations

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
"We are an all-flash array storage provider but our focus has been on VM-aware storage specifically for virtualized applications," stated Dhiraj Sehgal of Tintri in this SYS-CON.tv interview at 19th Cloud Expo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Choosing the right cloud for your workloads is a balancing act that can cost your organization time, money and aggravation - unless you get it right the first time. Economics, speed, performance, accessibility, administrative needs and security all play a vital role in dictating your approach to the cloud. Without knowing the right questions to ask, you could wind up paying for capacity you'll never need or underestimating the resources required to run your applications.
Web Real-Time Communication APIs have quickly revolutionized what browsers are capable of. In addition to video and audio streams, we can now bi-directionally send arbitrary data over WebRTC's PeerConnection Data Channels. With the advent of Progressive Web Apps and new hardware APIs such as WebBluetooh and WebUSB, we can finally enable users to stitch together the Internet of Things directly from their browsers while communicating privately and securely in a decentralized way.
WebRTC is about the data channel as much as about video and audio conferencing. However, basically all commercial WebRTC applications have been built with a focus on audio and video. The handling of “data” has been limited to text chat and file download – all other data sharing seems to end with screensharing. What is holding back a more intensive use of peer-to-peer data? In her session at @ThingsExpo, Dr Silvia Pfeiffer, WebRTC Applications Team Lead at National ICT Australia, looked at differ...
Adding public cloud resources to an existing application can be a daunting process. The tools that you currently use to manage the software and hardware outside the cloud aren’t always the best tools to efficiently grow into the cloud. All of the major configuration management tools have cloud orchestration plugins that can be leveraged, but there are also cloud-native tools that can dramatically improve the efficiency of managing your application lifecycle. In his session at 18th Cloud Expo, ...
With the proliferation of both SQL and NoSQL databases, organizations can now target specific fit-for-purpose database tools for their different application needs regarding scalability, ease of use, ACID support, etc. Platform as a Service offerings make this even easier now, enabling developers to roll out their own database infrastructure in minutes with minimal management overhead. However, this same amount of flexibility also comes with the challenges of picking the right tool, on the right ...
Security, data privacy, reliability and regulatory compliance are critical factors when evaluating whether to move business applications from in-house client hosted environments to a cloud platform. In her session at 18th Cloud Expo, Vandana Viswanathan, Associate Director at Cognizant, In this session, will provide an orientation to the five stages required to implement a cloud hosted solution validation strategy.
The security needs of IoT environments require a strong, proven approach to maintain security, trust and privacy in their ecosystem. Assurance and protection of device identity, secure data encryption and authentication are the key security challenges organizations are trying to address when integrating IoT devices. This holds true for IoT applications in a wide range of industries, for example, healthcare, consumer devices, and manufacturing. In his session at @ThingsExpo, Lancen LaChance, vic...
With all the incredible momentum behind the Internet of Things (IoT) industry, it is easy to forget that not a single CEO wakes up and wonders if “my IoT is broken.” What they wonder is if they are making the right decisions to do all they can to increase revenue, decrease costs, and improve customer experience – effectively the same challenges they have always had in growing their business. The exciting thing about the IoT industry is now these decisions can be better, faster, and smarter. Now ...
"Splunk basically takes machine data and we make it usable, valuable and accessible for everyone. The way that plays in DevOps is - we need to make data-driven decisions to delivering applications," explained Andi Mann, Chief Technology Advocate at Splunk and @DevOpsSummit Conference Chair, in this SYS-CON.tv interview at @DevOpsSummit at 19th Cloud Expo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Security, data privacy, reliability, and regulatory compliance are critical factors when evaluating whether to move business applications from in-house, client-hosted environments to a cloud platform. Quality assurance plays a vital role in ensuring that the appropriate level of risk assessment, verification, and validation takes place to ensure business continuity during the migration to a new cloud platform.
Fact is, enterprises have significant legacy voice infrastructure that’s costly to replace with pure IP solutions. How can we bring this analog infrastructure into our shiny new cloud applications? There are proven methods to bind both legacy voice applications and traditional PSTN audio into cloud-based applications and services at a carrier scale. Some of the most successful implementations leverage WebRTC, WebSockets, SIP and other open source technologies. In his session at @ThingsExpo, Da...
In his session at @DevOpsSummit at 19th Cloud Expo, Robert Doyle, lead architect at eCube Systems, will examine the issues and need for an agile infrastructure and show the advantages of capturing developer knowledge in an exportable file for migration into production. He will introduce the use of NXTmonitor, a next-generation DevOps tool that captures application environments, dependencies and start/stop procedures in a portable configuration file with an easy-to-use GUI. In addition to captur...
Who are you? How do you introduce yourself? Do you use a name, or do you greet a friend by the last four digits of his social security number? Assuming you don’t, why are we content to associate our identity with 10 random digits assigned by our phone company? Identity is an issue that affects everyone, but as individuals we don’t spend a lot of time thinking about it. In his session at @ThingsExpo, Ben Klang, Founder & President of Mojo Lingo, discussed the impact of technology on identity. Sho...
A critical component of any IoT project is what to do with all the data being generated. This data needs to be captured, processed, structured, and stored in a way to facilitate different kinds of queries. Traditional data warehouse and analytical systems are mature technologies that can be used to handle certain kinds of queries, but they are not always well suited to many problems, particularly when there is a need for real-time insights.