Liquibase Successfully Completes SOC 2 Type 2 Certification
The Liquibase Hub platform meets security, availability, and confidentiality standards set by AICPA
AUSTIN, TX – February 2, 2022 — Liquibase, the company behind the most powerful database change management solution, today announced the successful completion of its SOC2 Type 2 certification. This certification furthers the company’s commitment to being the safest and most powerful database management platform.
SOC 2 Type 2 compliance, part of the American Institute of CPAs’ Service Organization Control reporting platform, ensures that all systems and processes meet industry-standard security protocols, such as data security, system availability, and confidentiality requirements for handling personal information consistently over a period of at least three months.
“This certification is a significant milestone for us — it helps underscore that Liquibase is committed to keeping customer data secure and confidential,” said Kristyl Gomes, Senior Director of Engineering at Liquibase.
SOC 2 Type 2 builds on the Type 1 certification Liquibase earned in July 2021 and entails the review of those policies and controls but over a longer period of time. Read more about Liquibase’s journey to SOC2 Type 1 compliance.
Very similar to their Type 1 certification, Liquibase used Vanta as their integration and reporting platform and retained the same auditors at Sensiba San Filippo for their SOC 2 Certification.
In 2021, Liquibase released a new platform — Liquibase Hub, a SaaS application hosted in the AWS cloud. Liquibase Hub connects Liquibase users to a dashboard view of their database schema changes to help developers collaborate and troubleshoot database code issues faster and easier. Liquibase protects users’ data through multiple mechanisms including encryption in transit and at rest, row-level security, and access control. The SOC 2 Type 2 audit provides users with firm evidence in the form of a certification that details Liquibase Hub’s compliance with security practices.
Liquibase is committed to security both internally as well as externally. “We intend to continue to build on the secure foundation we laid in 2021 — ensuring that we attain a SOC 2 Type 2 certification in 2022, as well,” said Gomes. Liquibase has plans beyond SOC 2 compliance. They are in the beginning stages of certifying ISO 27001 compliance by performing a gap analysis. Their stretch goal is to have a successful ISO 27001 audit by the end of 2022.
Liquibase, the company behind the most powerful open source database change management solution, helps teams release software faster and safer by bringing database changes into existing CI/CD automation. Without automation, CI/CD fails at the database.
By using a repeatable process to easily create, validate, trace, and audit database changes from development through production, teams reduce security risks and costly errors.