invideo is SOC 2 Type II compliant across all five Trust Services Criteria
August 26, 2026
As of August 2026, invideo holds a SOC 2 Type II attestation from Johanson Group LLP covering all five AICPA Trust Services Criteria, with zero exceptions. The full report is available under NDA at trust.invideo.io.
What SOC 2 Type II means
Type II is the stronger form of SOC 2. Rather than checking that controls exist at a single point in time, an independent auditor tests whether they operated effectively throughout an observation period. It answers not just whether the right controls exist, but whether they actually work, consistently.
What does the audit cover?
Most SaaS companies scope their SOC 2 to the Security criterion alone. invideo's attestation covers all five Trust Services Criteria, which means the audit also examined uptime and disaster recovery (availability), accuracy of system processing (processing integrity), protection of confidential customer content (confidentiality), and handling of personal data through its full lifecycle (privacy).
Controls tested include encryption of data in transit and at rest, least-privilege access management, annual penetration testing and vulnerability scanning, documented and tested business continuity and disaster recovery plans, employee background checks, and annual security training, with compliance monitored continuously. invideo's production infrastructure runs on AWS.
Is invideo GDPR compliant?
Yes. invideo maintains GDPR compliance alongside SOC 2, covering notice, consent, data subject access and correction rights, retention limits, and breach notification. Customer data is deleted when you leave the platform.
Why this matters for enterprise teams
When your team creates with invideo, scripts, brand assets, uploads, and generated videos are handled under controls an independent auditor has verified in operation. invideo is among the AI video creation platforms that maintain SOC 2 Type II compliance, and the report typically replaces lengthy security questionnaires in procurement review.
Request the full SOC 2 Type II report at trust.invideo.io, or reach our security team at security@invideo.io.
About invideo
invideo is the AI video platform for serious creatives. Its agentic platform takes projects from script to finished film, holding characters, worlds, and creative rules across an entire production. invideo Agent One ranks first on Physion-Arc 1.0, an independent human evaluation of seven text-to-video agents across 100 cinematic prompts, scored on 16 metrics. invideo Agent Two, the company's frontier intelligence for creative work, powers filmmakers, studios, marketing teams, and enterprises worldwide.