Certifications
We adhere to industry standards for security and risk management.
AICPA SOC 2 Type 2
Oomnitza is SOC 2 Type 2 Compliant as audited by the Boulay Group. Our SOC 2 covers all five of the Trust Service Principles, including security, availability, processing integrity, confidentiality and privacy. The SOC 2 also includes a thorough description of Oomnitza processes used to protect the customers data processed by our systems.
CyberGRX Tier 2
Oomnitza is CyberGRX certified as part of the management and implementation process normally associated with our vendor ecosystem. Tier 2 assessments are normally required for vendors that pose an intermediate amount of risk, particularly for those who have access to internal customer data.
GDPR Audited
Oomnitza has completed its GDPR audit provided by KirkpatrickPrice. This audit verifies that Oomnitza has implemented safeguards that meet the protections required by GDPR and its data protection program is operating with sufficient effectiveness to provide reasonable assurance that the security, confidentiality, and integrity of nonpublic personal information is protected.
Jira Security Self-A
As a power user of Atlassian solutions (and specifically Jira), Oomnitza has gone through an extensive self-assessment for security purposes and we continuously monitor our use of systems resources to ensure the highest integrity of solutions for both our customers and our partners.
Whistic
Oomnitza works with Whistic to provide proactive vendor security as part of our efforts to publish and evaluate security posture to build trust across a continuously expanding IT partner ecosystem.