Definition
SOC 2 compliance is a security framework developed by the American Institute of Certified Public Accountants (AICPA) that defines how service providers store, process, and protect customer data.
It applies directly to any vendor handling sensitive call recordings, transcripts, or customer contact data, including call tracking and conversation intelligence platforms.
A SOC 2 audit evaluates a vendor against five Trust Service Criteria: security, availability, processing integrity, confidentiality, and privacy. Passing the audit means an independent third party has verified the vendor's controls meet those standards.
For businesses evaluating call tracking vendors, SOC 2 compliance is a baseline signal that the platform takes data handling seriously. It matters most when call data includes personally identifiable information, payment details, or protected health information.
Convirza serves 750+ enterprise customers whose call data flows through its infrastructure daily. Convirza is not currently certified under SOC 2 Type II. Call data is encrypted in transit and at rest, access is controlled and logged, HIPAA handling is available with a signed Business Associate Agreement, and the current subprocessor list is published on the security page.
See also PCI compliance for payment data security standards that often apply alongside SOC 2 in call center environments.
