PACTUNO · READINESS OVERVIEW
Security readiness overview
Pactuno has prepared an internal SOC 2 readiness tracker and is reviewing the scope of its broader security work. Implementation and evidence collection are ongoing.
Internal readiness work in progress
Progress to date
Security work completed so far
- Prepared an internal SOC 2 readiness tracker, an initial risk register, and draft security policies; SOC 1 applicability remains to be assessed.
- Added and tested selected safeguards for account access, tenant boundaries, file handling, and request-origin checks.
- Built a PacVault browser extension package with explicit site permission, review-before-save, and same-site fill controls.
- Ran automated local tests for the application and extension; these tests cover selected behavior and do not verify production operation.
This summary intentionally omits customer data, credentials, private configuration, and detailed internal findings.
Download public progress summary (PDF)Governance & risk
- Security policies and responsibilities
- Risk identification, ownership, and review
- Change management and secure development
Identity & access
- Authentication, MFA, and account recovery
- Role permissions and administrative access
- Session protection and access reviews
Data & application protection
- Tenant boundaries and authorization
- Data handling, retention, and deletion
- File safety, privacy, and secure application practices
Operations & resilience
- Security event monitoring and response
- Vulnerability and dependency management
- Backup, restoration, and service continuity
Third parties & evidence
- Vendor and service-provider reviews
- Control ownership and supporting evidence
- Periodic management review and improvement