Xsolla is now SOC 2 Certified

Cyberattacks will surge at an alarming rate this year, according to a January article in Forbes magazine. That’s because cyberwarfare is cheap, effective, and fast, and most companies aren’t prepared to defend themselves against it. 

We know cybersecurity is important to running your gaming business, and we’ve got you covered at Xsolla.

It’s our top priority to continuously improve our security practices and stay in league with other major technology providers, so you can focus on selling more games. The Service and Organization Controls (SOC) 2 certification means that our partners know they can trust us to protect their data.

‍

What SOC 2 Certification is

‍

The American Institute of CPAs (AICPA) designed SOC 2 for technology companies that store customer data in the cloud. To meet SOC 2 compliance, a company must have policies and procedures that include security, availability, processing integrity, confidentiality, and privacy of data stored in the cloud by doing the following:

‍

1. Monitor: continuous security monitoring of unusual, unauthorized, or suspicious system activities to find potential threats from external and internal sources  
2. Alert: alerting procedures set up for:
   - Exposure or modification of data, controls, configurations
   - File transfer activities
   - Privileged filesystem, account, or login access
   

3. Audit: a detailed audit trail to ensure adequate and appropriate responses to incidents
4. Act: respond and take corrective action to protect customers’ data from threats in a timely manner
   
   

What Xsolla’s SOC 2 Certification means for you

‍

For our partners, SOC 2 certification means that your data and the data you collect from your customers are safe and secure. We have processes in place that effectively detect threats, mitigate impact, and implement corrective measures to prevent similar events from happening in the future. We recognize the importance of cybersecurity. You can be confident that your data is securely managed and protected when you work with Xsolla.

If you’d like to learn more about our cybersecurity measures or SOC 2 certification, contact our team at am@xsolla.com.

Sources:

https://www.threatstack.com/blog/not-soc-2-compliant-4-reasons-your-customers-wont-work-with-you‍

https://medium.com/@BenPournader/what-is-soc2-and-do-we-need-it-b77e166cff54

‍