Blacksmith achieves SOC 2 Type 2 compliance

Blacksmith announced that it has completed a SOC 2 Type 2 audit and observation period, extending its SOC 2 Type 1 compliance achieved in May 2024. Developed by the AICPA, SOC 2 Type 2 evaluates whether a service provider’s security controls operate effectively over time, rather than only assessing their design at a single point. Blacksmith cites several security measures supporting its compliance, including isolated ephemeral virtual machines powered by AWS-maintained Firecracker for GitHub Actions workloads, minimal retention of execution metadata, no GitHub app access to customer secrets, strict access controls, incident-response procedures, and disaster-recovery planning. The company says the certification offers customers greater assurance that their information and workflows are protected, while committing to ongoing security improvements and recurring audits.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.