We're Now SOC 2
Type II Certified.

After a rigorous 12-month audit, NordLayer has achieved SOC 2 Type II certification — the gold standard in enterprise data security compliance.

Audit Period

Jan 2025 – Jan 2026

Auditor

Schellman & Company

Status

✔ No Exceptions Found

Sarah Lindqvist

Chief Security Officer, NordLayer

Dear Valued Customer,

Security is not a feature — it is a foundation. Today, I'm proud to share that NordLayer has officially received its SOC 2 Type II certification, independently verified by Schellman & Company, one of the most respected audit firms in information security.

This milestone reflects our unwavering commitment to protecting your data with the highest standards of operational security. Here is exactly what this means for your organization.

What This Means for You

Three pillars of enterprise-grade protection, independently audited.

🔍

Annual Penetration Testing

Our infrastructure undergoes rigorous third-party penetration testing every year. Vulnerabilities are identified, remediated, and re-tested before they can ever impact your operations.

🔒

End-to-End Encryption

All customer data is encrypted at rest using AES-256 and in transit using TLS 1.3. Encryption keys are managed through a dedicated key management service with automatic rotation every 90 days.

🛡️

Audited Role-Based Access Controls

Access to your data is governed by least-privilege RBAC policies. Every access event is logged, monitored, and audited quarterly. Only authorized personnel with a verified business need can access customer environments.

By the Numbers

99.98%

Platform Uptime
in 2025

256-bit

AES Encryption
at Rest

Data Breaches
Reported

“NordLayer's SOC 2 Type II report demonstrated a mature, well-documented security program with consistent control operation throughout the audit period. No exceptions were identified.”

— Schellman & Company, Lead Auditor, 2026

The team behind your security

Erik Svensson

Security Engineering

Mia Korhonen

Compliance & Risk

Jonas Bergman

Infrastructure

Astrid Dahl

Identity & Access

Available Now

Download Our Security Whitepaper

Our 28-page security whitepaper covers our full compliance posture, infrastructure architecture, incident response procedures, and how we protect your data end to end.

Download Security Whitepaper →

PDF · 28 pages · No form required

📋

Enterprise Security Compliance Update