News

PointOne Achieves SOC 2 Certification

PointOne Achieves SOC 2 Certification

This important certification underscores the rigorous security practices we've prioritized since day one.

This important certification underscores the rigorous security practices we've prioritized since day one.

This important certification underscores the rigorous security practices we've prioritized since day one.

January 13, 2025

Adrian Parlow

Co-Founder & CEO

In this article

Title

Title

Learn how PointOne uses AI to build the world's most advanced time and billing systems.

Legal time and billing, automated.

Learn how PointOne uses AI to build the world's most advanced time and billing systems.

Legal time and billing, automated.

We understand that the firms we work with manage some of the most sensitive data on earth. From day one of building PointOne, this has been a core guiding principle behind every technical and operational decision.

Today we're pleased to announce that we've completed a SOC 2 Type I compliance audit. This is an important recognition of the work our team has put in to make our platform safe and secure.

Why SOC 2 is important

SOC 2 (Service Organization Control 2) is a widely recognized standard set by the American Institute of Certified Public Accountants (AICPA). It focuses on the security, availability, processing integrity, confidentiality, and privacy of customer data. It is the gold standard indicating that the right controls are in place to safeguard sensitive data.

Our approach to security

PointOne uses AI to automatically track time for attorneys and paralegals. Doing this requires robust and secure processing of confidential data. We take a multi-pronged approach to protecting this data, including minimization of data collected, strong encryption standards, enterprise-grade infrastructure, logging and auditing, controls over data retention, and responsible AI practices including zero data retention and no training on firm data.

As such, it was no surprise to us that the SOC 2 process was largely a confirmation of controls we had already put in place.

Our ongoing commitment

We aspire to be world-class in this area and SOC 2 Type I is just the start for us. In addition to maintaining and strengthening our existing practices, we'll soon kick off the process for SOC 2 Type II, ISO 27001 and GDPR compliance.

Reach out to us at security@pointone.com with any questions or to request a copy of our SOC 2 report.

We understand that the firms we work with manage some of the most sensitive data on earth. From day one of building PointOne, this has been a core guiding principle behind every technical and operational decision.

Today we're pleased to announce that we've completed a SOC 2 Type I compliance audit. This is an important recognition of the work our team has put in to make our platform safe and secure.

Why SOC 2 is important

SOC 2 (Service Organization Control 2) is a widely recognized standard set by the American Institute of Certified Public Accountants (AICPA). It focuses on the security, availability, processing integrity, confidentiality, and privacy of customer data. It is the gold standard indicating that the right controls are in place to safeguard sensitive data.

Our approach to security

PointOne uses AI to automatically track time for attorneys and paralegals. Doing this requires robust and secure processing of confidential data. We take a multi-pronged approach to protecting this data, including minimization of data collected, strong encryption standards, enterprise-grade infrastructure, logging and auditing, controls over data retention, and responsible AI practices including zero data retention and no training on firm data.

As such, it was no surprise to us that the SOC 2 process was largely a confirmation of controls we had already put in place.

Our ongoing commitment

We aspire to be world-class in this area and SOC 2 Type I is just the start for us. In addition to maintaining and strengthening our existing practices, we'll soon kick off the process for SOC 2 Type II, ISO 27001 and GDPR compliance.

Reach out to us at security@pointone.com with any questions or to request a copy of our SOC 2 report.

We understand that the firms we work with manage some of the most sensitive data on earth. From day one of building PointOne, this has been a core guiding principle behind every technical and operational decision.

Today we're pleased to announce that we've completed a SOC 2 Type I compliance audit. This is an important recognition of the work our team has put in to make our platform safe and secure.

Why SOC 2 is important

SOC 2 (Service Organization Control 2) is a widely recognized standard set by the American Institute of Certified Public Accountants (AICPA). It focuses on the security, availability, processing integrity, confidentiality, and privacy of customer data. It is the gold standard indicating that the right controls are in place to safeguard sensitive data.

Our approach to security

PointOne uses AI to automatically track time for attorneys and paralegals. Doing this requires robust and secure processing of confidential data. We take a multi-pronged approach to protecting this data, including minimization of data collected, strong encryption standards, enterprise-grade infrastructure, logging and auditing, controls over data retention, and responsible AI practices including zero data retention and no training on firm data.

As such, it was no surprise to us that the SOC 2 process was largely a confirmation of controls we had already put in place.

Our ongoing commitment

We aspire to be world-class in this area and SOC 2 Type I is just the start for us. In addition to maintaining and strengthening our existing practices, we'll soon kick off the process for SOC 2 Type II, ISO 27001 and GDPR compliance.

Reach out to us at security@pointone.com with any questions or to request a copy of our SOC 2 report.

We understand that the firms we work with manage some of the most sensitive data on earth. From day one of building PointOne, this has been a core guiding principle behind every technical and operational decision.

Today we're pleased to announce that we've completed a SOC 2 Type I compliance audit. This is an important recognition of the work our team has put in to make our platform safe and secure.

Why SOC 2 is important

SOC 2 (Service Organization Control 2) is a widely recognized standard set by the American Institute of Certified Public Accountants (AICPA). It focuses on the security, availability, processing integrity, confidentiality, and privacy of customer data. It is the gold standard indicating that the right controls are in place to safeguard sensitive data.

Our approach to security

PointOne uses AI to automatically track time for attorneys and paralegals. Doing this requires robust and secure processing of confidential data. We take a multi-pronged approach to protecting this data, including minimization of data collected, strong encryption standards, enterprise-grade infrastructure, logging and auditing, controls over data retention, and responsible AI practices including zero data retention and no training on firm data.

As such, it was no surprise to us that the SOC 2 process was largely a confirmation of controls we had already put in place.

Our ongoing commitment

We aspire to be world-class in this area and SOC 2 Type I is just the start for us. In addition to maintaining and strengthening our existing practices, we'll soon kick off the process for SOC 2 Type II, ISO 27001 and GDPR compliance.

Reach out to us at security@pointone.com with any questions or to request a copy of our SOC 2 report.

Bring your timekeeping and
billing into the AI era

Book a demo to learn more.

Bring your timekeeping and
billing into the AI era

Book a demo to learn more.

Bring your timekeeping and
billing into the AI era

Book a demo to learn more.

Bring your timekeeping and
billing into the AI era

Book a demo to learn more.

Bring your timekeeping and
billing into the AI era

Book a demo to learn more.