---
title: "SOC 2 Type 2 Compliant | Phase Blog"
description: "We are officially SOC 2 Type 2 compliant — here's what that means for you and your data."
url: https://phase.dev/blog/soc2-type2-compliant/
---

[Blog](https://phase.dev/blog/)

# SOC 2 Type 2 Compliant

We are officially SOC 2 Type 2 compliant — here's what that means for you and your data.

[Nimish](https://x.com/nimishkarmali)

2026.02.28

![cover](https://phase.dev/assets/images/blog/soc2-compliant/cover.webp) Photo by Vladimir Kudinov

We're happy to announce that as of February 27, 2026, Phase is officially **SOC 2 Type 2 compliant**.

SOC 2 Type 2 compliance is the gold standard for demonstrating that an organization has maintained robust security controls over an extended period of time. Unlike Type 1, which is a point-in-time snapshot, Type 2 validates that our security practices have been consistently operational and effective throughout the audit observation period.

## What this means for you

For our customers, this means that Phase's security program has been independently verified by an accredited third-party auditor. This covers everything from how we handle your data, manage access controls, monitor our infrastructure, and respond to incidents.

You can learn more about our security posture and compliance program at our [trust center](https://trust.phase.dev). If you'd like to review the full SOC 2 Type 2 audit report, you can request access there as well.

## Acknowledgements

A big shout-out to the team at [Oneleet](https://oneleet.com/) for all the help and guidance throughout the entire process. From onboarding to audit, they handled everything on our behalf and made the process as smooth as possible.

## Get started with your own SOC 2 program

If you're a founder or technical team looking to get SOC 2 Type 2 compliant, we wrote a detailed guide on how to speedrun the entire process — from finding a compliance partner, to setting up controls, to surviving the audit. Check it out here: [Speedrunning SOC 2 Type 2](https://phase.dev/blog/speedrun-soc2).

![SOC 2 Type 2 certified badge](https://phase.dev/assets/soc2-certified-dark-badge.svg)

DeploymentSelf-hosted / Cloud

Get started

## Keep your secrets

Self-host or start on fully managed Cloud in under a minute.

Self-hosted

Run Phase on your own infrastructure. Free and open source.

AI agent deployment skill

[![Docker Compose logo](https://phase.dev/assets/images/docker.svg)](https://docs.phase.dev/self-hosting/docker-compose)[![Kubernetes logo](https://phase.dev/assets/images/kubernetes.svg)](https://docs.phase.dev/self-hosting/kubernetes)[![AWS logo](https://phase.dev/assets/images/aws.svg)](https://docs.phase.dev/self-hosting/aws-eks)[![GCP logo](https://phase.dev/assets/images/gcp.svg)](https://docs.phase.dev/self-hosting/gcp)[![Azure logo](https://phase.dev/assets/images/azure.svg)](https://docs.phase.dev/self-hosting/azure)[![Railway logo](https://phase.dev/assets/images/railway.svg)](https://docs.phase.dev/self-hosting/railway)[![Raspberry Pi logo](https://phase.dev/assets/images/raspberry.svg)](https://docs.phase.dev/self-hosting/raspberrypi)

[Self-hosting guide](https://docs.phase.dev/self-hosting)

Cloud

Fully managed. From signup to your first secret in 60 seconds.

Sign up with

[Google](https://console.phase.dev/login?provider=google)[GitHub](https://console.phase.dev/login?provider=github)[GitLab](https://console.phase.dev/login?provider=gitlab)