---
title: "[Archived] SOC 2 Reports | DuoCircle"
description: "DuoCircle"
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/legal/soc/"
---

Archived document

# SOC 2 Reports

Last updated May 4, 2026 

This document has been superseded.

The current version of this document is published at [Security and Compliance](/legal/security/). This page is preserved for reference and for any contract that explicitly cites it. The text below reflects the document as it was last updated above; subsequent changes are tracked only in the current version.

[Read the current version: Security and Compliance ](/legal/security/) 

## SOC 2 Reports

![](https://media.mailhop.org/duocircle/images/2022/04/Duocircle-SOC-NonCPA.png) 

The System and Organization Controls (SOC) Reports are independent third-party examination reports that demonstrate how DuoCircle achieves its key compliance controls. The purpose of these reports is to help customers, prospects, and their auditors understand the controls established to support operations and compliance.

DuoCircle has been examined annually under SOC 2 Type 2 since 2022.

### How to request the SOC 2 Type 2 report

DuoCircle’s SOC 2 reports are available to customers and serious prospects under a mutual non-disclosure agreement. We use the standardized [Bonterms Mutual NDA](https://bonterms.com/forms/bonterms-mutual-nda-v1/), it’s published publicly so you can review it before you ask, no surprises.

The process:

1. **Review the NDA** at the link above (publicly available, read it before you reach out).
2. **Contact us** to request the SOC 2 report.
3. **Sign** via the Bonterms web application using DuoCircle’s document signing software.
4. **Receive the report** as soon as the NDA is executed.

No procurement gauntlet, no redline negotiations, no week-long back-and-forth. The standardized Bonterms NDA exists so that the only thing standing between a serious prospect and the SOC 2 report is a single signature on a contract you’ve already read.

### What the SOC 2 Type 2 report covers

| SOC 2 Type 2: Security, Availability, Confidentiality, Processing Integrity |                                                                                                                                                                                                            |
| --------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| What is the report?                                                         | A description of DuoCircle’s controls environment plus an external audit of those controls against the AICPA Trust Services Criteria for Security, Availability, Confidentiality, and Processing Integrity |
| Under what standard?                                                        | AICPA Examination Engagements; SOC 2 Type 2 (TSP section 100A, 2017 Trust Services Criteria)                                                                                                               |
| Primary purpose                                                             | Independent assessment of the control environment for customers and users with a business need                                                                                                             |
| Audience                                                                    | Users with a business need under NDA                                                                                                                                                                       |
| Cadence                                                                     | Annual, since 2022                                                                                                                                                                                         |
| Auditor                                                                     | Hancock Askew & Co, LLP                                                                                                                                                                                    |

### Public trust signals (no NDA required)

While the full SOC 2 report requires an NDA (industry-standard practice), DuoCircle’s compliance posture is publicly verifiable through the Cloud Security Alliance:

- **CSA STAR Registry:** [cloudsecurityalliance.org/star/registry/duocircle/](https://cloudsecurityalliance.org/star/registry/duocircle/)
- **Level:** Level 1 (CAIQ Lite, subset of CCM v4.1)
- **Services listed:** Alumni Forwarding, AutoSPF, DMARC Report, Outbound SMTP, Phishing Protection, Tenant Migration

The CSA STAR self-description, completed annually, summarizes DuoCircle’s compliance posture without disclosing the SOC 2 report itself. Use it for early-stage diligence.

### Questions?

[Contact us](/contact/) and we’ll get the SOC 2 report process started, typically a same-day response.

---

## Questions about this document?

DuoCircle LLC, 5965 Village Way, Suite 105-234, San Diego, CA 92130\. Email[legal@duocircle.com](mailto:legal@duocircle.com)for legal inquiries, or[support@duocircle.com](mailto:support@duocircle.com)for everything else.

[All legal documents](/legal/) [Talk to an expert](/contact/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"WebPage","name":"SOC 2 Reports","description":"DuoCircle's SOC 2 Type 2 report has been examined annually since 2022. Review the Bonterms Mutual NDA, sign via the Bonterms platform, and we'll send you the re","url":"https://www.duocircle.com/legal/soc/","inLanguage":"en","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"isPartOf":{"@type":"WebSite","name":"DuoCircle","url":"https://www.duocircle.com"},"about":{"@type":"Organization","name":"DuoCircle LLC"},"dateModified":"2026-05-04T00:00:00.000Z","datePublished":"2022-04-29T14:20:02.000Z"}]
```
