Control & Compliance

SOC 2, ISO 27001 notes

SDA adheres to industry-leading security and compliance standards to ensure that customer data, environments, and operations remain protected.

---

SOC 2 Type 2

SDA maintains a SOC 2 Type 2 report, validating the design and operating effectiveness of controls related to security, availability, and processing integrity.

See SOC 2 Type 2 for more information on SDA's report.

---

ISO 27001 (Planned for H1 2026)

SDA is actively pursuing ISO 27001:2022 certification, with planned availability in H1 2026.

---

Governance, Risk, and Documentation Access

SDA provides SOC 2 reports, SIG/CAIQ questionnaires, security whitepapers, and architecture descriptions under NDA.

The User Management & SSO page provides details on identity governance, MFA, SAML/OIDC integration, and lifecycle management.