Skip to main content

xMatters Completes SOC 2 Examination

xMatters has successfully completed its System and Organization Controls (SOC 2) Type II examination, an industry requirement for technology vendors that demonstrates a high level of governance and security.

xMatters was evaluated on controls and effectiveness over a period of six months. xMatters’ service commitments and system requirements were evaluated based on the trust services criteria relevant to security and availability with no exceptions noted.

Enterprises turn to xMatters for an adaptive approach to incident management that reduces friction in the continuous software development cycle. xMatters delivers digital service resilience through automation, collaboration and by using data to inform and evolve incident management processes to deliver the most reliable customer experiences.

xMatters protects personal and company data by ensuring secure and reliable collaboration within its SaaS platform. The company complies with strict privacy regulations and enterprise standards and has an Assurance Program in place. xMatters is also audited against a detailed set of standards set by the American Institute of CPAs (AICPA). Its security practices and controls are aligned with the highest internationally recognized standards, such as International Organization for Standardization (ISO) 27001, ISO 27017, ISO 27018, and now SOC 2 and SOC 3, a publicly available summary of the SOC 2 report.

“Thousands of our users around the world log large amounts of data in our systems every day and entrust their information to our data protection structure,” said Kendra Niedziejko, Data Protection Officer and CFO at xMatters. “This SOC 2 Type II report not only provides our customers with the ultimate confidence that their data will be safe and secure, but it also helps streamline the procurement process. Building on our commitment to support secure data processes, we strive to exceed the highest standards for privacy and security so we can provide an exceptional and safe SaaS experience.”

The company continues to invest in the security of its services to not only meet, but exceed, industry standards and customer expectations. Completion of the SOC 2 examination builds on a number of security and compliance-related certifications by xMatters this past year:

- ISO 27001: 2013 Information Security Management System (ISMS): Sets compulsory controls in different risk management areas, such as data security, vulnerability management, access control and business continuity. xMatters achieved the milestone with zero nonconformities.

- ISO 27017: 2015 ISMS Cloud Security: Primarily concerned with the relationship between SaaS providers and their customers by implementing additional key security controls.

-ISO 27018: 2019 Management System for protection of personally identifiable information (PII) in public clouds acting as PII processors.

The Latest

Organizations that perform regular audits and assessments of AI system performance and compliance are over three times more likely to achieve high GenAI value than organizations that do not, according to a survey by Gartner ...

Kubernetes has become the backbone of cloud infrastructure, but it's also one of its biggest cost drivers. Recent research shows that 98% of senior IT leaders say Kubernetes now drives cloud spend, yet 91% still can't optimize it effectively. After years of adoption, most organizations have moved past discovery. They know container sprawl, idle resources and reactive scaling inflate costs. What they don't know is how to fix it ...

Artificial intelligence is no longer a future investment. It's already embedded in how we work — whether through copilots in productivity apps, real-time transcription tools in meetings, or machine learning models fueling analytics and personalization. But while enterprise adoption accelerates, there's one critical area many leaders have yet to examine: Can your network actually support AI at the speed your users expect? ...

The more technology businesses invest in, the more potential attack surfaces they have that can be exploited. Without the right continuity plans in place, the disruptions caused by these attacks can bring operations to a standstill and cause irreparable damage to an organization. It's essential to take the time now to ensure your business has the right tools, processes, and recovery initiatives in place to weather any type of IT disaster that comes up. Here are some effective strategies you can follow to achieve this ...

In today's fast-paced AI landscape, CIOs, IT leaders, and engineers are constantly challenged to manage increasingly complex and interconnected systems. The sheer scale and velocity of data generated by modern infrastructure can be overwhelming, making it difficult to maintain uptime, prevent outages, and create a seamless customer experience. This complexity is magnified by the industry's shift towards agentic AI ...

In MEAN TIME TO INSIGHT Episode 19, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA explains the cause of the AWS outage in October ... 

The explosion of generative AI and machine learning capabilities has fundamentally changed the conversation around cloud migration. It's no longer just about modernization or cost savings — it's about being able to compete in a market where AI is rapidly becoming table stakes. Companies that can't quickly spin up AI workloads, feed models with data at scale, or experiment with new capabilities are falling behind faster than ever before. But here's what I'm seeing: many organizations want to capitalize on AI, but they're stuck ...

On September 16, the world celebrated the 10th annual IT Pro Day, giving companies a chance to laud the professionals who serve as the backbone to almost every successful business across the globe. Despite the growing importance of their roles, many IT pros still work in the background and often go underappreciated ...

Artificial Intelligence (AI) is reshaping observability, and observability is becoming essential for AI. This is a two-way relationship that is increasingly relevant as enterprises scale generative AI ... This dual role makes AI and observability inseparable. In this blog, I cover more details of each side ...

Poor DEX directly costs global businesses an average of 470,000 hours per year, equivalent to around 226 full-time employees, according to a new report from Nexthink, Cracking the DEX Equation: The Annual Workplace Productivity Report. This indicates that digital friction is a vital and underreported element of the global productivity crisis ...

xMatters Completes SOC 2 Examination

xMatters has successfully completed its System and Organization Controls (SOC 2) Type II examination, an industry requirement for technology vendors that demonstrates a high level of governance and security.

xMatters was evaluated on controls and effectiveness over a period of six months. xMatters’ service commitments and system requirements were evaluated based on the trust services criteria relevant to security and availability with no exceptions noted.

Enterprises turn to xMatters for an adaptive approach to incident management that reduces friction in the continuous software development cycle. xMatters delivers digital service resilience through automation, collaboration and by using data to inform and evolve incident management processes to deliver the most reliable customer experiences.

xMatters protects personal and company data by ensuring secure and reliable collaboration within its SaaS platform. The company complies with strict privacy regulations and enterprise standards and has an Assurance Program in place. xMatters is also audited against a detailed set of standards set by the American Institute of CPAs (AICPA). Its security practices and controls are aligned with the highest internationally recognized standards, such as International Organization for Standardization (ISO) 27001, ISO 27017, ISO 27018, and now SOC 2 and SOC 3, a publicly available summary of the SOC 2 report.

“Thousands of our users around the world log large amounts of data in our systems every day and entrust their information to our data protection structure,” said Kendra Niedziejko, Data Protection Officer and CFO at xMatters. “This SOC 2 Type II report not only provides our customers with the ultimate confidence that their data will be safe and secure, but it also helps streamline the procurement process. Building on our commitment to support secure data processes, we strive to exceed the highest standards for privacy and security so we can provide an exceptional and safe SaaS experience.”

The company continues to invest in the security of its services to not only meet, but exceed, industry standards and customer expectations. Completion of the SOC 2 examination builds on a number of security and compliance-related certifications by xMatters this past year:

- ISO 27001: 2013 Information Security Management System (ISMS): Sets compulsory controls in different risk management areas, such as data security, vulnerability management, access control and business continuity. xMatters achieved the milestone with zero nonconformities.

- ISO 27017: 2015 ISMS Cloud Security: Primarily concerned with the relationship between SaaS providers and their customers by implementing additional key security controls.

-ISO 27018: 2019 Management System for protection of personally identifiable information (PII) in public clouds acting as PII processors.

The Latest

Organizations that perform regular audits and assessments of AI system performance and compliance are over three times more likely to achieve high GenAI value than organizations that do not, according to a survey by Gartner ...

Kubernetes has become the backbone of cloud infrastructure, but it's also one of its biggest cost drivers. Recent research shows that 98% of senior IT leaders say Kubernetes now drives cloud spend, yet 91% still can't optimize it effectively. After years of adoption, most organizations have moved past discovery. They know container sprawl, idle resources and reactive scaling inflate costs. What they don't know is how to fix it ...

Artificial intelligence is no longer a future investment. It's already embedded in how we work — whether through copilots in productivity apps, real-time transcription tools in meetings, or machine learning models fueling analytics and personalization. But while enterprise adoption accelerates, there's one critical area many leaders have yet to examine: Can your network actually support AI at the speed your users expect? ...

The more technology businesses invest in, the more potential attack surfaces they have that can be exploited. Without the right continuity plans in place, the disruptions caused by these attacks can bring operations to a standstill and cause irreparable damage to an organization. It's essential to take the time now to ensure your business has the right tools, processes, and recovery initiatives in place to weather any type of IT disaster that comes up. Here are some effective strategies you can follow to achieve this ...

In today's fast-paced AI landscape, CIOs, IT leaders, and engineers are constantly challenged to manage increasingly complex and interconnected systems. The sheer scale and velocity of data generated by modern infrastructure can be overwhelming, making it difficult to maintain uptime, prevent outages, and create a seamless customer experience. This complexity is magnified by the industry's shift towards agentic AI ...

In MEAN TIME TO INSIGHT Episode 19, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA explains the cause of the AWS outage in October ... 

The explosion of generative AI and machine learning capabilities has fundamentally changed the conversation around cloud migration. It's no longer just about modernization or cost savings — it's about being able to compete in a market where AI is rapidly becoming table stakes. Companies that can't quickly spin up AI workloads, feed models with data at scale, or experiment with new capabilities are falling behind faster than ever before. But here's what I'm seeing: many organizations want to capitalize on AI, but they're stuck ...

On September 16, the world celebrated the 10th annual IT Pro Day, giving companies a chance to laud the professionals who serve as the backbone to almost every successful business across the globe. Despite the growing importance of their roles, many IT pros still work in the background and often go underappreciated ...

Artificial Intelligence (AI) is reshaping observability, and observability is becoming essential for AI. This is a two-way relationship that is increasingly relevant as enterprises scale generative AI ... This dual role makes AI and observability inseparable. In this blog, I cover more details of each side ...

Poor DEX directly costs global businesses an average of 470,000 hours per year, equivalent to around 226 full-time employees, according to a new report from Nexthink, Cracking the DEX Equation: The Annual Workplace Productivity Report. This indicates that digital friction is a vital and underreported element of the global productivity crisis ...