It All Started With a Customer Request 

Sunny Dronawat, Plutoshift’s Chief Technology Officer, takes customer experience seriously. Back in 2019, two of their global customers requested that Plutoshift earn either a SOC 2 report or an ISO 27001 certification. Sunny knew the importance of these certifications to the customers and knew both cybersecurity assessments were vital to Plutoshift, whose Operational Data Platform helps businesses drive ROI by reducing resource consumption and operation costs. Every day, customers trust the company with their valuable data, so Sunny knew Plutoshift needed the necessary policies and procedures in place to provide the highest level of security. 

In the AI industry, where high volumes of data are constantly being consumed and analyzed, it’s important to be well-equipped to combat cybersecurity attacks and data security breaches. One of the main objectives of a SOC 2 audit is to ensure that industry best practices and protocols are in place to help organizations protect their systems and stored data from any unauthorized access. Moreover, SOC 2 ensures that confidential information is protected using industry compliance regulations, assisting organizations in improving their information security practices. The ISO 27001 cybersecurity framework is an international standard for managing information security, serving as a foundational chassis. With Plutoshift’s customers located around the globe, Sunny championed that both cybersecurity assessments made perfect sense to pursue.

Searching for the Right Partner

Plutoshift was looking for experts in the auditing industry to help guide them through the initial assessment process. In Sunny’s many years of leadership in the technology industry, he knew it was important to find an auditing firm that truly understood the software-as-a-service (SaaS) field and also came highly recommended. 

“Our CFO used A-LIGN at a prior SaaS company and was very happy with their work,” said Sunny. “It’s important that our auditor understands our industry and products before beginning the engagement. A-LIGN knows the ins and outs of the cloud, servers, data centers, and much more.” 

With the combination of A-LIGN’s industry expertise, a solid recommendation, and timely communication, Sunny ultimately chose A-LIGN as their compliance partner in completing a SOC 2 assessment and ISO 27001 certification.  

Earning a SOC 2 Report and ISO 27001 Certification

As soon as Plutoshift chose A-LIGN as their auditing firm, Sunny immediately kicked off the audit process. “During the process, it was very helpful having Arti Lalwani, A-LIGN’s ISO Practice Lead, on the calls,” said Sunny. “Arti has a wealth of knowledge and has seen it all. Having her drive the initiative, we were able to leverage her expertise in exploring various approaches and potential results.”