Security & Compliance
Security You Can Trust. Standards You Can Verify.
iFieldSmart AI has achieved SOC 2 Type II attestation and ISO/IEC 27001 certification, reflecting our commitment to keeping your project information safe from preconstruction through closeout.
Our Security Credentials
ISO/IEC 27001
CERTIFIEDUnderstanding Our Security Standards
SOC 2 Type II and ISO/IEC 27001 provide different forms of independent assurance. Each takes a distinct approach to evaluating how organizations manage information security.
SOC 2 Type II
The American Institute of Certified Public Accountants (AICPA) developed the Trust Services Criteria used in SOC 2 examinations. A Type II examination evaluates how effectively an organization's controls operate over a specified period and documents the auditor's findings in an independent report.
ISO/IEC 27001
ISO/IEC 27001 establishes requirements for an Information Security Management System. It helps organizations identify information security risks, implement appropriate controls, and continually improve their security management practices.
SOC 2 Type II and ISO/IEC 27001 Compared
SOC 2 Type II and ISO/IEC 27001 provide different forms of independent assurance.
| Comparison | SOC 2 Type II |
ISO/IEC 27001 |
|---|---|---|
| Assurance | Independent auditor's attestation report | ISMS certification |
| Assessed by | Independent CPA auditor | Independent certification body |
| Assessment focus | Operating effectiveness of controls over a defined period | Conformity of the ISMS against the standard |
| Developed by | AICPA (Trust Services Criteria) | ISO and IEC |
| Documentation | SOC 2 Type II report | ISO/IEC 27001 certificate |
Security & Compliance
What These Achievements Mean for Our Customers
Stronger Data Protection
Implementation of security controls and safeguards to help protect project and business information.
Independent Assurance
Independent auditors assess our security controls, while a certification body evaluates our Information Security Management System against ISO/IEC 27001 requirements.
Better Risk Management
Identifies potential security risks, assesses their impact, and implements appropriate measures to address them.
Compliance Support
Provides security documentation and information about practices to help customers complete vendor assessments and support compliance reviews.
How the Data is Protected
iFieldSmart AI integrates security practices into our systems, development processes, and business operations to help protect customer information.
Encryption
Data is encrypted during transmission and while it is stored.
Secure Access
Access is restricted to authorized users, and permissions are assigned according to their roles and responsibilities.
Continuous Monitoring
Monitor system activity, investigate unusual behavior, and respond to potential security threats.
Incident Response
Follow the documented response procedures and escalation processes to manage and address security incidents.
Vendor Risk Management
Assess vendor security practices and monitor potential risks throughout our business relationships.
Secure Development
Our development teams conduct code reviews and security testing to identify and address potential vulnerabilities.
A Milestone for Our Team
Achieving SOC 2 Type II attestation and ISO/IEC 27001 certification reflects the collective efforts of our teams and our commitment to protecting customer information.
Protecting customer information has always been central to how we build and deliver iFieldSmart AI solutions. Achieving SOC 2 Type II attestation and ISO/IEC 27001 certification reflects the dedication of our teams to maintaining strong security practices and earning our customers’ trust.”
Frequently Asked Questions
What is the difference between SOC 2 Type I and Type II?
SOC 2 Type I reports evaluate the design of controls at a point in time. SOC 2 Type II reports evaluate the operating effectiveness of controls over a period of time.
How is SOC 2 Type II different from ISO/IEC 27001?
SOC 2 Type II reports are a type of attestation service provided by a CPA firm, and ISO/IEC 27001 is a standard issued by an independent certifying body. In general, SOC 2 Type II and ISO/IEC 27001 assist the user in determining the security of the information processes of the service organization.
How do I obtain a SOC 2 Type II report?
Email clientrelations@ifieldsmart.com to obtain the report. We may require a signed Confidentiality Agreement prior to the report being released.
What does ISO/IEC 27001 certification mean?
An independent certification body assessed and certified that iFieldSmart’s Information Security Management System conforms to the requirements of the ISO/IEC 27001 standard. It defines, implements, and continually improves Information Security Management System (ISMS) processes.
How does iFieldSmart AI maintain its ISO/IEC 27001 certification?
We maintain certification through ongoing reviews, security improvement activities, and periodic surveillance audits by the certifying body.
Continuous Security & Assurance
Our Commitment to Security Never Stops
SOC 2 Type II attestation and ISO/IEC 27001 certification mark important milestones, but our commitment to information security goes beyond audits.
We continuously review our security practices, address emerging risks, and strengthen our safeguards as technology and customer requirements evolve.
Your project information deserves protection at every stage.