Metabase has achieved SOC 2 Type 1 compliance, demonstrating its commitment to data privacy and security through verified controls and processes designed to protect user data and maintain high availability. SOC 2 compliance, an industry standard verified by an independent CPA firm, ensures that organizations have robust systems and procedures to manage data security. Metabase’s adherence to these standards was confirmed by a third-party audit, and they are now progressing towards SOC 2 Type 2 compliance, which will verify the ongoing effectiveness of these controls. Customers and prospective clients can request the auditor's report under certain conditions. Meanwhile, Metabase continues to enhance the security of its application and hosting services, with updates and insights shared through community reports and surveys.