Peripheral is Now SOC 2 Type I Certified - and We’re Already Deep Into Type II

Over the last few months, a good portion of my calendar and my team’s energy has been spent on something that’s not exactly glamorous but absolutely necessary: getting our SOC 2 Type I audit done.

Today, I’m happy to share that Peripheral is officially SOC 2 Type I certified.
You can find all the details in our Trust Center: https://trustcenter.peripheral.com/

If you've ever gone through this process, you know Type I isn't just a checklist. It forces you to look under the hood and make sure your systems, processes, documentation, and day-to-day discipline actually match the way you think you operate. For a startup, that’s often where the real work is.

Type I means an independent auditor has validated that our controls exist and are designed correctly. It’s a snapshot in time. A snapshot we’re proud of.

But now the real part begins.

Next Stop: Type II

We’re already moving ahead with SOC 2 Type II.

Our commitment is simple:

• Keep improving the security posture of the platform.
• Maintain the discipline required to operate at enterprise-grade quality.
• Continue earning the trust of the people and companies who rely on Peripheral.

SOC 2 is not a badge we chase for marketing; it’s a reflection of how we want to operate. The bar we set now defines how we scale later.

More updates soon. Back to work.