← Back to Trust CenterSOC 2
MongoDB System and Organization Controls (SOC) Reports are the result of independent third-party audits that examine how MongoDB achieves key compliance controls and objectives. The MongoDB SOC 2 Security Type II report will help you and your auditors understand the MongoDB controls established to support data security, availability, confidentiality, privacy, and more.
Existing customers can request a copy of the report here. Prospective customers, please contact us.
FAQ
What is SOC 2?
SOC 2 is an auditing procedure designed to ensure that service providers securely manage data to protect the interests of your organization and the privacy of its clients. Developed by the American Institute of CPAs (AICPA), SOC 2 defines criteria for managing customer data based on five “Trust Service Principles” —
- Security: the system is protected against unauthorized access, both physical and logical
- Availability: the system is available for operation and use as committed or agreed
- Processing integrity: system processing is complete, accurate, timely, and authorized
- Confidentiality: information designated as confidential is protected as committed or agreed
- Privacy: personal information is collected, used, retained, disclosed, and destroyed in conformity with the commitments in the entity’s privacy notice and with the criteria set forth in Generally Accepted Privacy Principles
A SOC 2 report comes in two formats:
- Type I: measures policies and procedures that are in place at a specific moment in time
- Type II: measures the effectiveness of policies and procedures as operated over a specified time period, with a minimum of six months
What is the MongoDB SOC 2 report?
Which MongoDB services are in the scope for the SOC 2 Type II report?
What regions are covered by the MongoDB SOC 2 Type II report?
Who performs the independent 3rd-party audit of MongoDB for SOC reports?
What was the testing period for the most recent report and how often are MongoDB SOC 2 audits performed?
Is an NDA required to receive MongoDB SOC reports?
Yes, an NDA is required to review the MongoDB SOC 2 Type II report.
Existing customers can request a copy of the report here. Prospective customers, please contact us.
This page is for informational purposes only, and MongoDB does not intend the information or recommendations presented here to constitute legal advice. Each customer is responsible for independently evaluating its own particular use of MongoDB's services as appropriate to support its legal and compliance obligations.
View our other compliance offerings
Ready to get started?
Launch a new app or migrate to MongoDB Atlas with zero downtime