5 ms·
I don't work at GitHub, but I believe if you reach out to GitHub Support and sign an NDA they can provide you the SOC-2 report. (Most vendors will do this.)
by grinich 7y ago
I don't work at GitHub, but I believe if you reach out to GitHub Support and sign an NDA they can provide you the SOC-2 report. (Most vendors will do this.)
- amsully 7y agoWe reached out and were told we would need to upgrade to the enterprise version. (This was probably 5 months ago before they announced a few startup friendly offerings)
- staticassertion 7y agoI'm curious why you need the SOC2 report itself instead of some sort of signed statement of compliance. The details of the SOC2 don't seem like they should be important?
- grinich 7y agoWhen you're going through SOC-2, your auditor will ask for the SOC-2 report of each critical vendor.
- tomschlick 7y agoIf you're at that level of auditing I'd expect your company has enough cash to fork over for GHE.