Unique, business-critical insights from employees call for the highest level of protection in order to drive true advantage

Groopit, the enterprise SaaS platform that helps companies solve their most complex business problems with insights from employees, underscores its commitment to best-in-class data security by achieving a clean SOC 2 attestation report, a recognized benchmark for ensuring stringent data protection and operational standards. This, combined with the company's 2023 Net Promoter Score of 100, demonstrates the company's unwavering commitment to its customers.

Groopit's software, utilized by prominent companies like Home Depot, Mosaic, and Guidant Financial, handles copious amounts of unique and proprietary data. Safeguarding this data with impeccable security measures is critical. SOC 2 compliance serves as a testament to Groopit's dedication and conformity to best-in-class security practices.

"Employee insights are essential to building competitive advantage, improving customer satisfaction, and navigating any business problem," remarked Tammy Savage, CEO and co-founder of Groopit. "From our inception, we've been dedicated to delivering a platform that turns employee insights into data and ensures that such vital data is highly safeguarded."

Developed by the AICPA, SOC 2 is an extensive auditing procedure that ensures that a company is handling customer data securely and in a manner that protects the organization as well as the privacy of its customers. This attestation, overseen by a top-tier CPA firm endorsed by the Public Company Accounting Oversight Board, confirms Groopit's adherence to the rigorous SOC 2 Trust Service Criteria. Specifically, Groopit:

• Enforces SSO authentication with multi-factor protocols for application access.
• Has implemented an Intrusion Detection System (IDS) to promptly notify teams of potential security breaches.
• Conducts yearly Risk Assessments to pinpoint threats and recalibrate service commitments, accompanied by actionable remediation plans.
• Continuously scans all external systems for vulnerabilities and engages third-party penetration testing annually.
• Has established and annually tests a Disaster Recovery and Business Continuity Plan.
• Ensures comprehensive security policy acknowledgment by all staff and contractors, complete with an annual review process.
• Has implemented close to 200 controls required to achieve SOC2 attestation.

As more businesses turn to cloud-based services like Groopit to collect and process sensitive and confidential data, it is critical that they do so in a way that ensures the security of their data. Our customers bear this responsibility on their shoulders every day, and Groopit is steadfast in its commitment to support them in it.