September 2023 Summaries

Tailscale has successfully completed its 2023 SOC 2 Type II reassessment, demonstrating its commitment to data and information security by adhering to the AICPA's trust services criteria for security, availability, and confidentiality. The company, which completed its Type I audit in May 2022 and Type II in September 2022, emphasizes the importance of thorough documentation and cross-team collaboration in maintaining compliance, as well as fostering a positive relationship with their auditor, Aprio, for a smoother audit process. Tailscale highlights the value of each department participating in compliance efforts to prevent regulatory oversights, and it has made its SOC 2 Type II report more accessible by allowing users with a tailnet to download it without needing to sign an NDA, thereby reducing friction for due diligence inquiries.

Tailscale has expanded its secure remote networking capabilities to Apple TV with the introduction of tvOS 17, which now supports VPNs. This update allows Apple TV users to integrate their devices into a Tailscale network, offering benefits such as simplified media server connectivity and enhanced privacy. Users can stream from media servers like Plex or Jellyfin and share personal media collections securely with others without exposing them to the public internet. Moreover, the Tailscale app can transform the Apple TV into an exit node, routing traffic through another device in the user's network, thereby enhancing privacy and allowing access to geo-restricted content while traveling. Additionally, the Apple TV itself can serve as an exit node for other devices, facilitating secure and private internet usage even when away from home. The update aims to make advanced networking capabilities accessible to all users, regardless of their technical expertise.

Tailscale has partnered with Mullvad to enhance user privacy by integrating Mullvad's global network of VPN servers as exit nodes for Tailscale users, allowing secure and private internet browsing. Mullvad, known for its strong commitment to user privacy, anonymity, and security, does not log user activity and uses an account number system for subscriptions to protect personal data. This collaboration enables Tailscale users to access Mullvad’s extensive server network, with traffic being encrypted end-to-end through WireGuard tunnels. While Tailscale provides a user-friendly interface for connectivity, Mullvad ensures secure internet traffic routing without knowing users' identities. Available as a public beta, the service costs $5 per month for every five devices and can be added to any Tailscale plan. Despite offering conditional anonymity, the service does not claim true anonymity and acknowledges the challenges in preventing misuse by bad actors while protecting vulnerable users.