About

CSST Software has a favorable SOC 2 audit and completes audits once a year. According to this year’s SOC 2 - Type 2 Report, empowOR by CSST has established operational requirements that support the achievement of service commitments, relevant laws and regulations, and other system requirements. Such requirements are communicated in its system. policies and procedures, system design documentation, and customer agreements. Information security policies define an organization-wide approach to how systems and data are protected. These include policies around how the service is designed and developed, how the system is operated, how the internal business systems and networks are managed, and how employees are hired and trained. In addition to these policies, standard operating procedures have been documented on how to carry out specific manual and automated processes required in the operation and development of various CSST services. Our SOC 2 had no findings listed.
In terms of additional security measures, Miles IT, which hosts our application, has been subject to Security, Privacy, Confidentiality and Availability SOC 2 Type II audits annually and CSST Software reviews the report to ensure consistency with principal objectives and service commitments. Current Service Level Agreements guarantee a software response time (defined as the interval from the time the end user sends a transaction to the time a visual confirmation of transaction completion is received), of less than two (2) seconds for 98% of all transactions.