WordPress VIP has successfully completed its first System and Organization Controls (SOC) 2® Type 2 examination, and the report is now included in our Trust Package.
What is it?
A SOC 2 Type 2 report is an independent examination of whether a company’s controls operated effectively over a period of time. Fortreum examined WordPress VIP’s platform against the AICPA’s Trust Services Criteria for Security and Availability.
The examination covered the period March 1 through July 17, 2026. The resulting report noted no exceptions.
Why it matters
Independent assessments such as SOC 2 reports provide information you may need during security reviews and procurement processes, and for ongoing vendor oversight. A Type 2 not only tells you how our controls are designed to protect your sites, but also tells you that they held up over a period of time.
The report gives you independent assurance that VIP’s security controls – including access management, monitoring, and change management – operated as designed throughout the period. It also offers independent evidence that our infrastructure includes backup and recovery controls to support the platform.
WordPress VIP’s SOC 2 Type 2 examination builds on its prior SOC 2® Type 1 examination and FedRAMP authorization, providing a fuller picture of the platform’s overall security program.
Get the report
Visit WordPress VIP’s Trust Center to request our Trust Package, which also includes our latest security and compliance documentation.