{"id":6603,"date":"2025-09-30T14:17:27","date_gmt":"2025-09-30T14:17:27","guid":{"rendered":"https:\/\/www.waters.com\/blog\/?p=6603"},"modified":"2025-10-08T15:58:09","modified_gmt":"2025-10-08T15:58:09","slug":"achieving-soc-2-type-ii-compliance-a-milestone-in-customer-trust-and-security","status":"publish","type":"post","link":"https:\/\/www.waters.com\/blog\/achieving-soc-2-type-ii-compliance-a-milestone-in-customer-trust-and-security\/","title":{"rendered":"Achieving SOC 2 Type II Compliance: A Milestone in Customer Trust and Security"},"content":{"rendered":"\n<p class=\"has--font-size wp-block-paragraph\">We are pleased to announce that Waters Corporation has successfully achieved SOC 2\u00ae Type II attestation for the waters_connect Cloud software platform, in accordance with the American Institute of Certified Public Accountants (AICPA) standards.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This accomplishment reflects our unwavering commitment to safeguarding customer data, building trust, and upholding the highest standards of security, availability, and confidentiality across our cloud software platform.&nbsp;<\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-6603_51de9f-2b .kt-block-spacer{height:60px;}.wp-block-kadence-spacer.kt-block-spacer-6603_51de9f-2b .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-6603_51de9f-2b\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What is AICPA SOC 2 Type II?<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SOC 2 (Service Organization Control 2) is an internationally recognized auditing framework developed by the AICPA. It evaluates a company\u2019s ability to manage customer data securely across five \u201cTrust Service Criteria\u201d:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Security<\/li>\n\n\n\n<li>Availability<\/li>\n\n\n\n<li>Processing integrity<\/li>\n\n\n\n<li>Confidentiality<\/li>\n\n\n\n<li>Privacy<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-8f761849 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image\"><img decoding=\"async\" width=\"381\" height=\"378\" src=\"https:\/\/www.waters.com\/blog\/wp-content\/uploads\/image-1.png\" alt=\"image\" class=\"wp-image-6607\" srcset=\"https:\/\/www.waters.com\/blog\/wp-content\/uploads\/image-1.png 381w, https:\/\/www.waters.com\/blog\/wp-content\/uploads\/image-1-300x298.png 300w, https:\/\/www.waters.com\/blog\/wp-content\/uploads\/image-1-150x150.png 150w\" sizes=\"(max-width: 381px) 100vw, 381px\" \/><\/figure>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">While a Type I\u202freport reviews the design of controls at a single point in time, a SOC 2 Type II\u202fcertification<strong> <\/strong>report goes further. It independently validates that controls were effectively implemented and consistently operated over an extended review period (often 6 \u201312 months).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our SOC 2 audit focused on the Security element of the Trust Service Criteria. Achieving this attestation provides our customers with ongoing assurance that our policies, processes, and technologies do not just exist on paper but are reliably executed in practice.&nbsp;<\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-6603_45cd66-8d .kt-block-spacer{height:60px;}.wp-block-kadence-spacer.kt-block-spacer-6603_45cd66-8d .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-6603_45cd66-8d\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Why SOC 2 Type II Compliance Matters for Our Customers<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As a provider of cloud software for analytical laboratories, many of which operate in highly regulated environments such as pharmaceuticals, life sciences, and healthcare, security and compliance aren\u2019t optional, they\u2019re essential.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Regulatory alignment: <\/strong>Laboratories operating under frameworks such as FDA 21 CFR Part 11 compliance, EMA guidance, and Good Laboratory Practice (GLP) must demonstrate that their data systems meet stringent requirements for security and integrity. Our SOC 2 Type II attestation provides assurance that our platform adheres to industry-recognized standards that align with these expectations.&nbsp;<\/li>\n\n\n\n<li><strong>Risk management:<\/strong> By undergoing independent audit, we provide our customers with verified assurance that their critical and often highly sensitive data is protected against unauthorized access, tampering, and service disruption.&nbsp;&nbsp;<\/li>\n\n\n\n<li><strong>Audit support: <\/strong>For our customers, vendor qualification and compliance audits are routine but resource-intensive activities. Our SOC2 Type II report serves as objective evidence of our control environment, reducing the burden of vendor due diligence and supporting smoother audit readiness.&nbsp;<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-6603_e8f230-26 .kt-block-spacer{height:60px;}.wp-block-kadence-spacer.kt-block-spacer-6603_e8f230-26 .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-6603_e8f230-26\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Strengthening the Waters Foundation for Growth<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">While this attestation is a significant achievement, it is not an end point. SOC 2 Type II compliance reflects a continuous commitment to security and operational excellence. As we continue to innovate and expand our technologies and solutions for analytical labs, we remain dedicated to:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Maintaining a cycle of ongoing monitoring, review, and improvement of our control environment&nbsp;<\/li>\n\n\n\n<li>Ensuring all stakeholders, including employees and external resources, remain trained and accountable for upholding industry best practices&nbsp;<\/li>\n\n\n\n<li>Engaging in periodic independent audits to provide customers with updated assurance&nbsp;<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-6603_c877a5-3e .kt-block-spacer{height:60px;}.wp-block-kadence-spacer.kt-block-spacer-6603_c877a5-3e .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-6603_c877a5-3e\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Continuing the Waters Commitment to Security<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to achieving SOC 2 Type II attestation, and as evidence of our continuing commitment to security, we are proud to share that our CyberVadis rating (as detailed in our blog <a href=\"https:\/\/www.waters.com\/blog\/protecting-your-laboratory-data-cybersecurity-at-waters\/\" target=\"_blank\" rel=\"noreferrer noopener\">Protecting Your Laboratory Data: Cybersecurity at Waters<\/a>) has recently advanced from \u2018developed\u2019 to \u2018mature\u2019, now awarding us a Platinum Medal. This rating goes beyond our waters_connect Cloud software platform and covers the entire organization. &nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cybervadis provides independent assessments of cybersecurity management systems, benchmarking organizations against international standards and best practices. This upgrade reflects the progress we have made in implementing a more advanced, integrated, and proactive cybersecurity program.&nbsp;&nbsp;<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"804\" height=\"459\" src=\"https:\/\/www.waters.com\/blog\/wp-content\/uploads\/image.png\" alt=\"image\" class=\"wp-image-6606\" srcset=\"https:\/\/www.waters.com\/blog\/wp-content\/uploads\/image.png 804w, https:\/\/www.waters.com\/blog\/wp-content\/uploads\/image-300x171.png 300w, https:\/\/www.waters.com\/blog\/wp-content\/uploads\/image-768x438.png 768w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n<\/div>\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-6603_f93b23-3a .kt-block-spacer{height:60px;}.wp-block-kadence-spacer.kt-block-spacer-6603_f93b23-3a .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-6603_f93b23-3a\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>SOC 2 Type II Compliance: Your Trust is Our Highest Priority<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For organizations that entrust us with their critical laboratory data, this AICPA certification achievement underscores a simple message: your trust is our highest priority.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We\u2019re proud to have reached this milestone, and we look forward to continuing to deliver secure, reliable, and compliant cloud solutions that enable analytical labs to focus on what they do best \u2013 advancing science.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Explore how Waters Cloud Software Solutions are transforming laboratory informatics. Visit our <a href=\"https:\/\/www.waters.com\/nextgen\/us\/en\/products\/informatics-and-software\/waters-cloud-software-solutions.html\" target=\"_blank\" rel=\"noreferrer noopener\">Cloud Software Solutions page<\/a> to learn more.&nbsp;&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We are pleased to announce that Waters Corporation has successfully achieved SOC 2\u00ae Type II attestation for the waters_connect Cloud software platform, in accordance with the American Institute of Certified Public Accountants (AICPA) standards.\u00a0 This accomplishment reflects our unwavering commitment to safeguarding customer data, building trust, and upholding the highest standards of security, availability, and&#8230;<\/p>\n","protected":false},"author":167,"featured_media":6614,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_seopress_titles_title":"%%post_title%% %%sep%% %%sitetitle%%","_seopress_titles_desc":"Learn how Waters Corporation is protecting customer data with the SOC 2\u00ae Type II attestation for the waters_connect\u2122 Cloud software platform, in accordance with AICPA standards.\u00a0","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"none","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"both","_seopress_redirections_param":"","_seopress_redirections_type":301,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[599,22],"tags":[715,108,706,23,44,414,110,17],"class_list":["post-6603","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-featured","category-technology","tag-aicpa-certification","tag-compliance","tag-cybersecurity","tag-informatics","tag-laboratory-informatics","tag-regulatory","tag-regulatory-compliance","tag-software"],"acf":[],"taxonomy_info":{"category":[{"value":599,"label":"Featured"},{"value":22,"label":"Technology"}],"post_tag":[{"value":715,"label":"aicpa certification"},{"value":108,"label":"compliance"},{"value":706,"label":"cybersecurity"},{"value":23,"label":"informatics"},{"value":44,"label":"laboratory informatics"},{"value":414,"label":"regulatory"},{"value":110,"label":"regulatory compliance"},{"value":17,"label":"Software"}]},"featured_image_src_large":["https:\/\/www.waters.com\/blog\/wp-content\/uploads\/ps-badges-rgb_soc2-type2.png",751,925,false],"author_info":{"display_name":"Lola Armstead","author_link":"https:\/\/www.waters.com\/blog\/author\/larmstead\/"},"comment_info":"","category_info":[{"term_id":599,"name":"Featured","slug":"featured","term_group":0,"term_taxonomy_id":599,"taxonomy":"category","description":"","parent":0,"count":39,"filter":"raw","term_order":"0","cat_ID":599,"category_count":39,"category_description":"","cat_name":"Featured","category_nicename":"featured","category_parent":0},{"term_id":22,"name":"Technology","slug":"technology","term_group":0,"term_taxonomy_id":22,"taxonomy":"category","description":"Our expertise drives innovation, development, and\u00a0application of informatics and software that continue to enable leading pharmaceutical, environmental, food &amp; beverage and chemical materials organizations to accelerate decision-making, improve laboratory effectiveness, and get products to market faster.","parent":0,"count":116,"filter":"raw","term_order":"0","cat_ID":22,"category_count":116,"category_description":"Our expertise drives innovation, development, and\u00a0application of informatics and software that continue to enable leading pharmaceutical, environmental, food &amp; beverage and chemical materials organizations to accelerate decision-making, improve laboratory effectiveness, and get products to market faster.","cat_name":"Technology","category_nicename":"technology","category_parent":0}],"tag_info":[{"term_id":715,"name":"aicpa certification","slug":"aicpa-certification","term_group":0,"term_taxonomy_id":715,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"0"},{"term_id":108,"name":"compliance","slug":"compliance","term_group":0,"term_taxonomy_id":108,"taxonomy":"post_tag","description":"","parent":0,"count":12,"filter":"raw","term_order":"0"},{"term_id":706,"name":"cybersecurity","slug":"cybersecurity","term_group":0,"term_taxonomy_id":706,"taxonomy":"post_tag","description":"","parent":0,"count":2,"filter":"raw","term_order":"0"},{"term_id":23,"name":"informatics","slug":"informatics","term_group":0,"term_taxonomy_id":23,"taxonomy":"post_tag","description":"","parent":0,"count":12,"filter":"raw","term_order":"0"},{"term_id":44,"name":"laboratory informatics","slug":"laboratory-informatics","term_group":0,"term_taxonomy_id":44,"taxonomy":"post_tag","description":"","parent":0,"count":11,"filter":"raw","term_order":"0"},{"term_id":414,"name":"regulatory","slug":"regulatory","term_group":0,"term_taxonomy_id":414,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"0"},{"term_id":110,"name":"regulatory compliance","slug":"regulatory-compliance","term_group":0,"term_taxonomy_id":110,"taxonomy":"post_tag","description":"","parent":0,"count":15,"filter":"raw","term_order":"0"},{"term_id":17,"name":"Software","slug":"software","term_group":0,"term_taxonomy_id":17,"taxonomy":"post_tag","description":"","parent":0,"count":5,"filter":"raw","term_order":"0"}],"_links":{"self":[{"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/posts\/6603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/users\/167"}],"replies":[{"embeddable":true,"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/comments?post=6603"}],"version-history":[{"count":0,"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/posts\/6603\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/media\/6614"}],"wp:attachment":[{"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/media?parent=6603"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/categories?post=6603"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.waters.com\/blog\/wp-json\/wp\/v2\/tags?post=6603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}