# Karat

At Karat, we recognize the importance of safeguarding our clients' data. That is why we adhere to the highest standards of security at every level of our products and operations. This includes prioritizing the protection of this information by implementing robust security controls and measures designed to secure all aspects of our services.

Karat is committed to ensuring the security, confidentiality, and integrity of our clients’ information, in adherence with industry best practices, regulatory requirements, and the use of advanced technologies which prevent unauthorized access to this information. Our security framework is designed to protect sensitive information through advanced encryption protocols, continuous monitoring, and comprehensive incident response strategies.

Please see more information below on the various controls Karat has implemented to keep your information secure.

## Compliance

SOC 2 Type II

## Resources

- [Karat - 2025 SOC 2 Type II Report](https://trust.trykarat.com/?requestAccessOpen=true&requestedResources=67bcd650cc31699d248f7ab6)

## Controls

### Infrastructure security
  
- Unique account authentication enforced  
- Production application access restricted  
- Unique network system authentication enforced

### Organizational security
  
- Production inventory maintained  
- Confidentiality Agreement acknowledged by contractors

### Product security
  
- Data encryption utilized  
- Control self-assessments conducted  
- Vulnerability and system monitoring procedures established

### Internal security procedures
  
- Cybersecurity insurance maintained  
- SOC 2 - System Description  
- Whistleblower policy established

Vanta connects to a company's core systems to continuously monitor these controls.