The bar procurement asks for
Type II means the controls held up over an audit period, not just on paper. That is what campus CISOs and airport security teams expect before a parking vendor gets near student or traveler data.
Certifications
SOC 2 Type II
An independent auditor already tested how Spot actually runs, not a one-day snapshot. Universities, airports, and enterprise operators get the report from our Trust Center.
What we put in front of the auditor
Security, availability, and confidentiality. Least-privilege access, annual security training, and third-party penetration tests on the apps and the cloud. The same program that protects permits, plates, and citations day to day.
Always on
Logs and alerts are watched around the clock. Secrets live in a vault. Passwords are hashed and salted, never stored in the clear. When something looks wrong, an on-call engineer is already in the rotation.
Get the report
Attestations, policies, and the SOC 2 report are in the Trust Center. If an RFP needs a specific exhibit, talk to us.
More in Trust
- SOC 2 Type II
- PCI DSS
- HECVAT
- Role-based access
- Data residency