26 January 2023

Endava Successfully Completes SOC2 Type 2 Attestation Audit

At Endava, information security is at the heart of every successful digital acceleration initiative. We continue to believe that our customers deserve to be sure that they have partnered with a technology company which is aligned with industry standards and best practices while building and operating secure solutions for them. On that note, we are pleased to announce that Endava has successfully completed its SOC2 Type 2 attestation audit for its software development and managed by Endava operations for the period 1 November 2021 to 31 October 2022. This attestation further exemplifies our commitment to the most rigorous controls to ensure Security, Availability and Confidentiality of the data.

Endava’s compliance to the SOC2 audit standard provides our customers with an assurance that we treat their information in accordance with the SOC2 trust services criteria of Security, Availability and Confidentiality. These trust services criteria, developed by the American Institute of Certified Public Accountants (AICPA), are considered “gold standards” for assessing service provider security.

This “Type 2” audit continues to assure that our security controls and processes have been properly designed and operated effectively to meet the stringent requirements of the trust services criteria.

“I am proud to report that Endava has achieved SOC2 Type 2 compliance accreditation. We are pleased the attestation covers both our software development practises and our managed by Endava operational offerings, ensuring end-to-end service compliance and reflecting our dedication to security.”
Helena Nimmo, CIO, Endava

Aligning our operations with the SOC2 trust services criteria adds to Endava’s corporate assurance portfolio, complementing our existing security and quality certifications:
■ ISO 27001 (International Standard for the Management of Information Security)
■ ISO 22301 (International Standard for the Management of Business Continuity)
■ ISO 9001 (International Standard for Quality Management)

SOC2 Type 2 is part of Endava’s continuous efforts to enhance our security and our position as a trusted digital acceleration partner.


About Endava

Endava is reimagining the relationship between people and technology. By leveraging next-generation technologies, our agile, multi-disciplinary teams provide a combination of product & technology strategies, intelligent experiences, and world-class engineering to help clients become digital, experience-driven businesses by assisting them in their journey from idea generation to development and deployment of products, platforms and solutions. Endava collaborates with its clients, seamlessly integrating with their teams, catalysing ideation and delivering robust solutions.

Endava services clients in Payments and Financial Services, TMT, Consumer Products, Retail, Mobility and Healthcare. As of September 30, 2022, 12,065 Endavans served clients from locations in Asia-Pacific, Middle East, North America and Western Europe and delivery locations in Argentina, Bosnia & Herzegovina, Bulgaria, Colombia, Croatia, Malaysia, Mexico, Moldova, North Macedonia, Poland, Romania, Serbia, Slovenia and Uruguay.