What does SOC 2 compliance mean?
Established by the American Institute of Certified Public Accountants (AICPA), the SOC 2 audit formally reviews our policies, procedures and systems that protect information across the Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy). The SOC 2 Type II audit is conducted on an annual basis, and the most recent report can be made available upon request.
What are ISO-27001 and ISO-27701 certifications?
The International Organization for Standardization 27001 Standard (ISO-27001) is a foundational information security standard that guarantees the secure management of office sites, development centers, support centers, and data centers. ISO-27701 is an amendment to and extension of ISO-27001 that focuses on data privacy and processing requirements.
Our ISO certifications are awarded from A-LIGN, an independent, third-party auditor. A‑LIGN is an ISO/IEC 27001 and 27701 certification body accredited by the ANSI-ASQ National Accreditation Board (ANAB). These certifications run for 3 years (renewal audits) and have annual touchpoint audits (surveillance audits).
Download our ISO-27001 Certificate Download our ISO-27701 Certificate
Which Rustici Software products are SOC 2 compliant, ISO-27001 and ISO-27701 certified?
* Managed hosting option only. On-premise installations are not covered under SOC 2, ISO-27001 and ISO-27701.
-
SCORM Cloud
SCORM Cloud helps you test, play and distribute your eLearning. SCORM Cloud’s SaaS-based application is built to host, test, deliver and track all of your learning in one place. If you’re looking for something more customizable, the SCORM Cloud API allows you to add Cloud’s features right into your application. Sign up for our free trial to get started today.
Learn more -
Content Controller*
Content Controller (managed hosting only) lets you centrally host, manage and distribute eLearning courses. Using the Content Controller web application hosted on our servers, your team can log in to easily upload content, manage course versions, enforce licenses, capture course analytics and elegantly deliver courses to clients in multiple languages.
Learn more -
Rustici Engine*
Rustici Engine (managed hosting only) is a content player integrated directly into your application to manage the import and launch of SCORM, xAPI, cmi5, and AICC content. Engine sits behind hundreds of LMSs on the market.
Learn more
Our commitment to you
At Rustici Software, we’re committed to information security and privacy. We often get requests or questionnaires to gather the details of our security policies and posture. We have made those available here in our public-facing security documentation. Rustici Software maintains an internal Information Security Management System (ISMS) and a privacy information management system (PIMS) that is certified to comply with SOC 2 Type II audit, ISO/IEC 27001:2013 and ISO/IEC 27701:2019 Annex B (PII Processor) framework. While not all of our ISMS and PIMS is public at this time, this website contains documents that we’ve worked to make public in the interests of transparency.
Have questions? Ask us anything.
When we say “ask us anything,” we really mean it. We talk to hundreds of people every month, many of whom aren’t sales prospects. We’re happy to help, so ask us anything.