ISO/IEC 27001 is an international standard for establishing, implementing, maintaining and improving an information security management system (ISMS), with certification demonstrating that an organisation’s ISMS has been independently assessed against the standard. 

SOC 2 Type II is an independent attestation report based on the AICPA Trust Services Criteria that evaluates the design of controls and their operating effectiveness over a defined review period. 

Broadly, ISO/IEC 27001 is widely recognised as a benchmark for risk-based security governance, and SOC 2 Type II is a measure of how well key controls operate over an extended period. 

Rich Ratcliff, chief trust officer at OpinionRoute, said: “Clients place real trust in OpinionRoute when they run their research through our platform and services.

“Achieving ISO/IEC 27001 and SOC 2 Type II is a clear, independent signal that we take that responsibility seriously; building security into how we operate, how we evolve the platform and how we protect data across the full research lifecycle.”