Trust
SOC 2 Type II
Fonada is SOC 2 Type II certified. This page states what that means and what we publish. It does not include the auditor’s name, the audit window, or the report itself.
SOC 2 is an audit of how a service organization protects customer data. The Trust Services Criteria cover security, availability, processing integrity, confidentiality, and privacy. Type II is the form of the audit that looks at whether controls worked over time.
Fonada’s public security statement is SOC 2 Type II, together with ISO 27001, an EcoVadis Gold sustainability rating, and alignment with India’s DPDP Act 2023. The controls named on the security policy are TLS 1.3 in transit, encryption at rest, role-based access, SSO, MFA, audit logs, and retention and deletion settings.
The SOC 2 report is not a public download. Enterprise customers can request the documentation. A vulnerability in a Fonada system should be reported to security@fonada.com.
Questions
Is Fonada SOC 2 Type II certified?
Yes. Fonada states that it is SOC 2 Type II certified. The report is not posted on this page. Enterprise customers can request compliance documentation.
What does Type II mean?
SOC 2 Type II means an auditor tested whether the controls operated over a period of time, not only whether they were designed. Fonada does not publish the length of that period or the auditor on this page.
Which controls does Fonada describe in public?
TLS 1.3 for data in transit, encryption for data at rest, role-based access control, single sign-on, multi-factor authentication, audit logs, and configurable retention and deletion. Security documentation is available to enterprise customers on request.
How do I request the SOC 2 report?
Enterprise customers can request compliance documentation. Vulnerability reports go to security@fonada.com.