RainFocus reports SOC 2 Type II compliance across all five trust criteria

RainFocus announced on April 27, 2026 that it achieved SOC 2 Type II compliance for all five Trust Services Criteria: security, availability, confidentiality, processing integrity and privacy. The company explains that a Type II report requires an independent auditor to verify that controls operated effectively over an extended period, rather than at a single point in time. RainFocus also reports PCI-DSS and ISO 27001 compliance and says it hosts more than 10,000 events a year. Chief technology officer Mike Bushman said the audit covers the entire platform because it was built on a single code base.

The details

• The five criteria covered are security, availability, confidentiality, processing integrity and privacy.
• SOC 2 is a framework developed by the American Institute of Certified Public Accountants.
• Chief Information Security Officer Jon Kerby said the company protects first-party data for clients including global financial and enterprise organizations.
• RainFocus pairs the SOC 2 report with ISO 27001 and PCI-DSS compliance.

Context

The announcement came three months after RainFocus introduced Nexus, a system of AI agents for event marketers, in January 2026, and after its December 2025 Base Module and 2026 marketing forecast. In our later coverage, RainFocus upgraded Base Webinar in June, launched MCP Profiles for AI agents and Adobe Experience Manager connectors in July, launched a Sales Module in July and published a mid-year event report in September.

Not disclosed

• Audit period covered by the report
• Name of the audit firm
• Whether the report is available to prospects under NDA