Flourish completes SOC 2 Type 1 audit

Our customers trust us to keep their data safe and secure. Since our inception, we’ve taken that trust seriously by making security a top priority across our organization. 

One of the biggest steps any organization can take in embracing security is the pursuit of a SOC (Service Organization Controls) 2 certification. This certification serves as independent verification that a company satisfies or exceeds the exacting security measures and industry standards relevant to security, availability, processing integrity, confidentiality, or privacy defined by the American Institute of Certified Public Accountants (AICPA). We believe that this certification is more important than ever, given increased cloud adoption and remote workforces paired with rising cybersecurity threats.

We’re proud to announce that on April 18, 2022 Flourish completed our SOC 2 Type 1 examination, which evaluated the processes, procedures, and controls around the Flourish Platform services—including both Flourish Cash and Flourish Crypto. The examination was performed to validate that Flourish had the necessary security, availability, and confidentiality controls designed, implemented, and operating effectively as of November 30, 2021. Our SOC 2 Type 1 examination was conducted by KPMG LLP, a “Big 4” independent third-party accounting and auditing firm. 

At Flourish, security and risk management is every single employee’s job. Pursuing a SOC 2 is voluntary and not necessarily motivated by compliance or any other regulatory requirements, but was an important step for our organization, given the trust placed in us by our customers. Ensuring that we had the appropriate controls and processes in place for our SOC 2 Type 1 examination was truly a collaborative effort across the Flourish team. 

We’re proud of this milestone, but know that security is an ongoing effort. We are committed to remaining vigilant as our business evolves and new threats arise, and therefore are excited to embark on our next journey towards SOC 2 Type 2 certification.