LEHI, Utah – RainFocus™, provider of the next-generation event marketing platform, recently achieved System and Organization Controls (SOC) 2® Type II compliance for all five Trust Services criteria: Security, Availability, Confidentiality, Processing Integrity, and Privacy.
The accomplishment highlights RainFocus’ strong ongoing commitment to maintaining rigorous industry standards for data protection and security. RainFocus has also achieved PCI-DSS and ISO 27001 compliance. Adding this SOC 2 Type II attestation underlines a higher standard of scrutiny.
About SOC 2 Type II Compliance
SOC 2 is an auditing framework developed by the American Institute of Certified Public Accountants that assesses an organizations’ controls in the five Trust Services Criteria. The criteria — Security, Availability, Confidentiality, Processing Integrity, and Privacy — are the guiding principles of SOC 2 compliance.
SOC 2 applies to service organizations that store, process, or transmit sensitive data on behalf of their clients or user entities. A SOC 2 Type II report looks at operational effectiveness over a period of time.
Why It Matters
As RainFocus hosts over 10,000 events annually, the SOC 2 compliance demonstrates the organization’s continued dedication to strong internal controls and safeguards for its clients’ data and services.
While many industry frameworks validate that security controls are in place at the moment of an audit, the SOC 2 Type II is distinguished by its mandatory lookback period. Unlike other certifications, a Type II report requires an independent auditor to verify the operational effectiveness of controls over an extended window. This timeline highlights RainFocus’ continuous commitment to security.
RainFocus Perspective
- Jon Kerby, Chief Information Security Officer (CISO): “We protect massive volumes of first-party data for clients, including global financial and enterprise clients, and we take that role very seriously. The combination of our core security reports – ISO (international), SOC 2 Type II for all five criteria (U.S. security standard), and PCI (financial security) – reflects the trust and credibility our clients have in us to securely manage and protect their sensitive data.”
- Mike Bushman, Chief Technology Officer (CTO): “While others have SOC 2 Type II compliance, the scope and depth of RainFocus’ certification are what differentiate us from fragmented legacy security. Our audit covers the entire platform because it was built on a single, clean code base. That’s unique in this industry.”
For more information, visit rainfocus.com/privacy-security.
About RainFocus
RainFocus is the leading enterprise platform for event marketing and management. We help organizations run in-person, virtual, and hybrid event programs of all sizes from one system, with the data and personalization needed to drive measurable business results. With the industry’s most advanced agentic AI at its core, we orchestrate engagement at every stage of the customer lifecycle — unifying touchpoints, driving event impact, and making each engagement smarter. Learn more at rainfocus.com.
