CodeSandbox is Now SOC 2 Compliant
Another milestone that shows our commitment to keeping your code and data secure.
With CodeSandbox, you can turn your repository into a shareable development environment that's available 24/7. Give it a try with this Next.js example or import your GitHub repo!
Today, we are thrilled to announce that CodeSandbox is officially SOC 2 compliant! This attests to our ability to handle and process customers' data and meet key security standards.
As CodeSandbox becomes the choice of a growing number of enterprises, we understand the importance of building trust in our security and data handling practices. Our SOC 2 Type II report shows that we prioritize the protection of customer data and are committed to building a robust security and compliance program.
Given the strict security requirements of enterprises worldwide, this achievement will allow us to bring CodeSandbox to larger organizations while ensuring the protection of their code and data.
Why SOC 2?
You might wonder, “What’s SOC 2, and why should I care?" In a nutshell, SOC 2 (Service Organization Controls 2) is the gold standard for data security and privacy. It's a rigorous framework governed by the American Institute of Certified Public Accountants (AICPA) that sets the bar high for how organizations protect their customers' information.
If you’re a CodeSandbox user, you probably know that we keep pushing the boundaries of what's possible in the world of coding in the cloud. With CodeSandbox CDE, we delivered a truly seamless cloud development environment that is powerful, performant and collaborative like no other. But as we empower organizations to bring their entire development process to our CDE, we had to make security a top priority.
With cyber threats becoming increasingly sophisticated, we knew it was time to double down on our security efforts.
By undergoing a SOC 2 audit, we put our policies, procedures, and controls to the test. An independent auditor gave us a thorough review and confirmed that our security measures are not only well-designed but also working effectively.
As the ultimate standard for security and trust, SOC 2 allows us to deliver a compliant solution, both to CodeSandbox Pro subscribers and our Enterprise customers.
Our SOC 2 journey
As you might imagine, achieving SOC 2 compliance is not a trivial project. Fortunately, we teamed up with Vanta to streamline our journey. Their platform seamlessly integrated with our systems and provided guidance to implement the policies and procedures needed before the audit. Then, Advantage Partners verified our audit readiness and kicked off our Type II audit. Their team evaluated our controls and provided valuable feedback. After the audit window closed, they delivered our report.
One valuable lesson we learned is that achieving SOC 2 compliance is a marathon, not a sprint.
While having the right partners made a world of difference, it still required dedication and focus from our team. Fortunately, the majority of requirements aligned very well with our current way of working and we had already adopted several security best practices, which helped streamline this process.
Throughout this process, we collaborated with our auditor to establish a clear timeline, set a target audit date, and worked backward to ensure we were ready. Now that our controls are in place and security is more deeply ingrained in our culture, future SOC 2 audits will be even smoother.
Looking ahead
This wasn’t a very typical project for our team and it definitely took us outside of our comfort zone at times, which makes it all the more gratifying to see our hard work pay off.
We have been building CodeSandbox as the most complete solution for any organization wanting to streamline its development processes by coding in the cloud. Our SOC 2 Type II report is a major component of that vision and we will continue to build on top of it to maintain our strict commitment to security and compliance.
We're excited to share this milestone with you! If you’d like to learn more about our security practices and how CodeSandbox Enterprise can be a good fit for your business, talk to us!
