SOC 2 readiness
Northwind Labs · SOC 2 — Security · as of 14 Sep 2026
0%Readiness
0 of 20 criteria met
- Met0
- At risk0
- Not met0
- Not started0
Why it isn't 100%
12 open- Not met
GOV-2Employees acknowledge acceptable use
Acceptable Use Policy — 3 people haven't signed, 46 days overdue
- At risk
ACC-3User access is reviewed quarterly
Quarterly user access review — evidence was due 21 Aug 2026
- Not started
PPL-2Annual security awareness training
Security awareness training completion — no evidence collected yet
- Not started
RSK-1Annual risk assessment
Risk assessment sign-off — no evidence collected yet
- Not started
RSK-2Vendors are assessed before onboarding
Critical vendor security review — no evidence collected yet
- Not started
ACC-4Access is removed within 24h of leaving
Offboarding checklist sample — no evidence collected yet