Koalendar Achieves SOC 2 Type II Compliance

We’re proud to announce that Koalendar has successfully completed its SOC 2 Type II examination.

Organizations rely on Koalendar to manage appointments, availability, customer information, and important scheduling workflows. Completing this examination provides independent validation that the security controls protecting that data are appropriately designed and operate effectively over time.

SOC 2 is a widely recognized security framework developed by the American Institute of Certified Public Accountants (AICPA). It evaluates how service providers protect customer data across areas such as security, availability, processing integrity, confidentiality, and privacy.

A Type II examination goes beyond reviewing whether security controls exist at a single point in time. Independent auditors assess how those controls operate throughout an extended review period.

For Koalendar customers, this means our security practices have not simply been documented. They have been independently examined to confirm that they are consistently followed.

During the examination period, independent auditors evaluated the controls Koalendar uses to protect its systems and customer data.

These controls include:

• Encryption of customer data in transit using TLS 1.2 or higher
• Encryption of customer data at rest, including AES-256 encryption for sensitive information
• Role-based access controls and multi-factor authentication for production systems
• Continuous monitoring and incident response processes
• Regular vulnerability scanning and penetration testing
• Secure development and change management practices
• Vendor risk management
• Business continuity and disaster recovery planning

Successfully completing the examination confirms that the controls included within its scope were suitably designed and operated effectively throughout the audit period.

Your bookings may contain contact details, appointment information, calendar data, and responses to custom questions. Our SOC 2 Type II report provides independent assurance that Koalendar maintains controls designed to protect this information.

Many companies, healthcare providers, educational institutions, and larger organizations require their software vendors to meet established security standards.

Koalendar’s SOC 2 Type II report can help your security, compliance, and procurement teams evaluate our controls and complete vendor reviews more efficiently.

Whether you manage one booking page or scheduling across a large organization, the same security program helps protect your data and workflows as your use of Koalendar grows.

Completing our SOC 2 Type II examination is an important milestone, but it is not the end of our security work.

We will continue to monitor our systems, test our defenses, improve our internal processes, and adapt our controls as Koalendar and the security landscape evolve. We also plan to complete regular independent examinations to maintain a high standard of protection for our customers.

Thank you to every customer who trusts Koalendar with their scheduling. We take that responsibility seriously and will continue investing in the security, privacy, and reliability of our platform.

• Visit our Trust Center to see our SOC 2 Type II documentation and request the report.
• Visit our Security and Data Protection page to learn more about how Koalendar protects your data.
• Existing customers and prospective customers with security or compliance questions can contact us at support@koalendar.com.

Koalendar makes it simple for individuals and teams to share their availability, accept bookings, and manage appointments. Our SOC 2 Type II compliance is another step toward making scheduling not only easier, but safer.