Security at esumry

We take security seriously at esumry. We have successfully completed a thorough Type 1 SOC2 examination. This achievement underscores our unwavering commitment to maintaining the highest standards of security and safeguarding your valuable information.

SOC2 (System and Organization Controls 2) is an internationally recognized auditing standard developed by the American Institute of Certified Public Accountants (AICPA). It evaluates an organization's controls and processes related to security, availability, processing integrity, confidentiality, and privacy.

We are proud that our SOC2 examination report is unqualified. This means that our security practices have been assessed by an independent third-party auditor and found to be in compliance with the stringent SOC2 standards. This achievement reflects our dedication to ensuring the confidentiality, integrity, and availability of your data within our systems.
 

Key Security Practices

To provide you with a transparent overview of our security practices, we would like to highlight some of the key measures we have implemented:

• Data Encryption: We employ robust encryption protocols to secure data both in transit and at rest. This ensures that your sensitive information remains confidential and protected from unauthorized access.

• Secure Access Controls: We implement strong access controls, including multi-factor authentication and role-based permissions, to restrict system access only to authorized personnel.

• Regular Security Audits: We conduct regular internal and external security audits to identify and promptly address any vulnerabilities in our systems.

• Employee Training and Awareness: We provide comprehensive training to our employees on security best practices and ensure that they are aware of their responsibilities regarding the protection of customer data.

• Incident Response: We have a well-defined incident response plan in place to handle security incidents promptly and effectively, minimizing any potential impact.

• Continuous Monitoring: We employ advanced monitoring tools and technologies to detect and respond to any security events in real-time, reducing the risk of any breaches or unauthorized activities.

Customer Trust

At esumry, the trust you place in us by utilizing our services is very important. Our SOC2 unqualified report serves as a testament to our dedication to providing you with a secure environment for your data. We are committed to continuously improving our security practices and staying up to date with evolving industry standards and best practices. If you have any questions or concerns regarding our security measures or would like to review a copy of the report of examination, please do not hesitate to contact our security team (security@esumry.com).

Responsible Disclosure:

We aim to foster trust and partnership with the security community, recognizing the importance of vulnerability disclosures and whistleblowers to ensure safety and security for our customers, employees, and company.  Please report any security vulnerabilities you discover by following our Responsible Disclosure Policy.

Press Release

July 5, 2023 — esumry, provider of deposition analysis software, today announced that it has successfully completed a Type 1 System and Organization Controls 2 (SOC 2) examination for its esumry service as of May 31, 2023. The examination conducted by AssurancePoint, LLC (www.assurancepoint.cpa) found that esumry achieved its service commitments and system requirements as measured by the SOC 2 criteria for Security. The examination concluded with an unqualified (clean) opinion.

SOC 2 reports are attestation reports that examine controls at a service organization relevant to the security, availability, or processing integrity of a system (security, availability, and/or processing integrity categories) or the confidentiality or privacy of the information processed for the user entities (confidentiality or privacy categories). Our SOC 2 report provides users of our services with information regarding the design of our internal controls relevant to the selected SOC 2 criteria. The information presented has been examined by an independent CPA firm.

“Our esumry software is revolutionizing the way legal professionals work with witness deposition testimony, saving them time and money,” said esumry CEO James Chapman. “We built esumry with our customers’ data security needs top of mind to protect privileged and sensitive case information.”

The successful completion of the SOC 2 examination is an example of esumry’s commitment to the security of its customers’ data. esumry intends to continually execute and improve upon its internal controls and to provide consistent assurance to its customers via an annual SOC 2 report.

About esumry

esumry is a software company focused on serving the litigation needs of the legal and insurance professions. The esumry system is a deposition analysis tool that helps legal professionals and others involved in litigation quickly perform deposition analysis, summarization, and related tasks to drive cases to faster resolution, with a goal to ultimately save its customers time and money.