FARO has completed a SOC 2 Type 1 examination of HoloBuilder™ and FARO Sphere® XG. The related report is aimed to provide assurances about the usefulness of available controls at a service organization that are relevant to the security and availability of the system used to process clients’ information.
Learn more about SOC 2 or how to get access to the report below.
What is a SOC 2 Type I report?
SOC 2 is an internationally recognized standard for evaluating a company’s preparedness for maintaining security, data availability, data processing, information confidentiality and privacy compliance.
Developed by the the American Institute of Certified Public Accountants (AICPA), this report addresses how a service organization manages customers' data in terms of Security, Availability, and Processing Integrity used by the service organization to process users’ data and the confidentiality and privacy of the information these systems process. More information on the SOC 2 report can be found on this link directly on AICPA's website.
There are 2 types of SOC reports:
Type I: describes a Vendor's systems and whether their design is suitable to meet relevant trust principles.
Type II: details the operational effectiveness of these systems.
Who did the SOC 2 Type I audit?
Our audit was completed by an independent third party according to the Trust Service Criteria (TSC) developed by the Auditing Standards Board of the AICPA and in accordance with the SSAE 18 standard.
The service provider performed the audit on behalf of FARO Technologies, Inc. and examined the HoloBuilder and Sphere XG solution.
What does the SOC 2 Type I attestation mean for our customers?
We are committed to delivering a high standard of information security for our customers and to ensure that we continue to meet this commitment, we have completed a SOC 2 Type 1 examination. You as our customer can be assured that we will continue to provide services that meet the industry’s highest standards.
The SOC 2 Type I report provides an independent assessment of whether FARO’s controls are effectively designed, thereby protecting customer data from unauthorized access.
Why did HoloBuilder conduct the SOC 2 Type I twice?
After the acquisition of HoloBuilder by FARO in June 2021, processes have changed, and we aligned our HoloBuilder processes with the FARO processes. While updating the controls we decided to assess a new set of controls, that can be scaled on all FARO products including Sphere XG.
As part of our ongoing commitment to security, completing the SOC 2 Type II report later this year will be the next step to attest the operational effectiveness of the security and availability controls that we have in place.
How to request the SOC 2® Type I report?
Please send us your request to your customer success manager or send an email directly to soc2@holobuilder.com. Our team will get back to you with the required steps to receive the corresponding report for review.