Critical industry certification reflects ORI’s commitment to data integrity and privacy

HIGHLAND, Utah – January 01, 2024 – ORI, creator of the AI-powered ORI Excellence Platform for supply chain success, today announced the company has been awarded the System and Organizational Controls 2 Type 2 (SOC 2) certification.

Developed by the American Institute of CPAs (AICPA), SOC 2 is an auditing process designed to ensure integrity and privacy of customer data used by third-party vendors, like software-as-a-service (SaaS) developers. The certification process is an intense, months-long series of audits, evaluations, and tests conducted by an independent CPA who then submits a written opinion. ORI’s auditor found the company met the certification’s high standards without exception.

‍

“Our SaaS product is fueled by a powerful data engine, so we take data security and user privacy extremely seriously,” said ORI President James Barlow. “Our SOC 2 certification is further proof that we are not only excellent at structuring data for the benefit of our customers, but also careful stewards who take great pains to ensure customer data is protected.”

‍

The SOC 2 certification is based on five “trust service principles” which form the auditors’ criteria for evaluating proper customer data management:

‍

• Availability: Network performance, site failover, and incident handling.
• Confidentiality: Encryption, firewalls, and access controls.
• Processing integrity: Monitoring of data processes and assessment of quality assurance procedures.
• Privacy: Collection, use, retention, disclosure, and disposal of personal identifiable information (PII).
• Security: Web application firewalls (WAFs), intrusion detection, multi-factor authentication, and data access controls. ‍

SOC 2 reports are unique to each company, with the organization responsible for designing its internal business practices and data management controls to comply with one or more of the trust service principles.

‍

The SOC standard includes two types of certification reports. Type 1 provides a description of the vendor’s system and determines if the design meets the appropriate trust service principles. Type 2 details the operational effectiveness of the vendor’s systems.

‍

ORI customers will be given a copy of the report upon request.

‍

For more information on ORI, visit ORI.io.

‍

‍

About ORI

ORI’s data and software platform helps companies reduce operational risk, manage supply chain uncertainty, and increase resiliency by dynamically managing S&OE, S&OP, and long-term planning in one place. Founded by respected industry veterans, ORI has led some of the most successful and advanced S&OP implementations in industries such as automotive products, chemicals, consumer packaged goods, cosmetics, electronics, food and beverage, health care, logistics and transportation, paper goods, and more.

‍

Media inquiries

press@ori.io