Videospan Completes Annual SOC 2 Type 2 Attestation

Videospan has successfully completed its annual SOC 2 Type 2 attestation.

An independent CPA firm examined the design and operating effectiveness of Videospan's relevant controls throughout the defined audit period. The resulting report, Videospan SOC 2 Type 2 Report 2026, provides independent assurance of the security practices and operational rigor behind the platform, and is available to customers and prospects through our trust center under NDA.

The annual examination is part of an ongoing commitment, not a one-time milestone. Between independent examinations, Videospan continuously monitors its internal security controls, so the attestation reflects a sustained security program rather than a snapshot.

Security Is Foundational to Enterprise Video Infrastructure

Videospan provides brand infrastructure for enterprise video. Organizations rely on the platform to capture, create, manage, and distribute video across brands, teams, and regions: recording executives and employees, collecting video from distributed teams, managing branded content across business units, and centralizing organizational video libraries.

As video becomes core enterprise infrastructure, the systems supporting it require mature security and operational practices. When a platform holds your brand assets, your employee recordings, and your content library, security cannot be a feature added to satisfy a checklist. It has to be foundational to how the platform is built and operated.

That is the role independent attestation plays. It gives enterprise marketing, IT, security, and procurement teams audited evidence that the operational discipline behind Videospan matches the responsibility the platform carries.

What Is SOC 2?

SOC 2 (System and Organization Controls 2) is an attestation reporting framework developed by the AICPA for evaluating controls at service organizations against the applicable Trust Services Criteria. An independent auditor examines whether a company's controls meet those criteria, and customers use the resulting report to support their own vendor risk assessment with confidence.

The framework defines five Trust Services Criteria:

Security: protection against unauthorized access, disclosure, and damage to systems and information. Security is required in every SOC 2 examination.
Availability: systems remain available for operation and use according to commitments.
Processing Integrity: processing is complete, valid, accurate, timely, and authorized.
Confidentiality: information designated as confidential receives appropriate protection.
Privacy: personal information is collected, used, retained, disclosed, and disposed of according to applicable commitments and criteria.

Only Security is mandatory. The other categories are included when they are relevant to the services being examined, so the scope of any given SOC 2 report is defined by which criteria it covers.

Security: The required common criteria — protection against unauthorized access.

The five SOC 2 Trust Services Criteria as segments of one system of trust — Security (the common criteria) is required in every report; the others are scoped in as they apply. Select a criterion to highlight its segment.

The visualization above explains the framework generally. The specific scope of Videospan's examination is documented in the report itself, available through our trust center.

There is also an important distinction between the two report types:

Type 1 evaluates the design of controls at a particular point in time.
Type 2 evaluates the design and operating effectiveness of controls over a defined examination period.

Type 2 provides evidence that controls operated effectively over time, rather than simply existing at a single point. That is what makes annual Type 2 attestation meaningful: enterprise customers are not relying on a claim that controls exist, but on independently examined evidence that they work, day after day.

Per AICPA usage requirements, you can learn more about the SOC for Service Organizations framework at aicpa.org/soc4so.

What This Means for Videospan Customers

Independent assurance. Videospan's security controls are evaluated by an independent third-party CPA firm, not self-asserted.
Simplified vendor-risk reviews. Enterprise security, compliance, and procurement teams can evaluate audited evidence instead of relying exclusively on questionnaires and self-reported claims.
Confidence at scale. Whether you are recording executives, collecting video across distributed teams, or managing a global video library, the platform underneath it operates under examined controls and ongoing internal monitoring.
A sustained commitment. Annual independent attestation, supported by continuous internal security monitoring, demonstrates an operating posture rather than a one-time effort.

SOC 2 does not guarantee security or eliminate risk. What it provides is independent, structured evidence about how a platform is operated, so your teams can make informed vendor-risk decisions.

Access Our SOC 2 Type 2 Report

The full Videospan SOC 2 Type 2 Report 2026, along with the rest of our security documentation, is available to customers and prospects under NDA through our trust center:

👉 https://trust.videospan.com

To learn how Videospan supports enterprise video infrastructure, from brand standards to secure content management at scale, visit videospan.com.