Need help applying this to your account?
Contact support and we will keep this article attached to your request.
Overview
Yes. Referral Factory is SOC 2 Type II audited and can provide the current report when a customer needs it for a security or procurement review.
What does SOC 2 Type II mean?
SOC 2 Type II is an independent report that looks at how a service's controls worked over a period of time. It is a report, not a certification like ISO.
The public information does not include the report, audit scope, audit period, or exceptions. If you need those details, request the current report from Referral Factory.
How do I request the report?
Contact Referral Factory through the contact page or your account team and ask for the current SOC 2 Type II report for your review. Referral Factory's DPA explains that audit information may be provided after a written request and under confidentiality terms or an NDA.
What does the report not cover?
A SOC 2 report does not tell you whether your referral campaign follows every privacy, marketing, reward, or consumer-protection rule. You still need to set up and review your own campaign.
For a wider view of platform controls, read What Security Features Does Referral Factory Use?. You can also review the Referral Factory Trust Centre.