SOC 2 readiness
Northwind Labs · SOC 2 — Security · as of 14 Sep 2026
0%Readiness
0 of 20 criteria met
- Met0
- At risk0
- Not met0
- Not started0
Why it isn't 100%
5 open- Not met
GOV-2Employees acknowledge acceptable use
Acceptable Use Policy — 3 people haven't signed, 46 days overdue
- At risk
ACC-3User access is reviewed quarterly
Quarterly user access review — evidence was due 21 Aug 2026
- Not started
RSK-2Vendors are assessed before onboarding
Critical vendor security review — no evidence collected yet
- Not started
OPS-4Hardware and software assets are inventoried
Asset inventory export — no evidence collected yet
- Not started
DAT-2Data is classified and retained by policy
Data Classification & Retention — v1.0 is still a draft