Schedule a discovery call
Schedule a discovery call

Security and Compliance

Built to pass your security review.

XOP holds feedback, audit results, and service data from across your locations. Before any platform touches that data, your IT and procurement teams need proof it's protected. Touchwork is SOC 2 Type II compliant and TX-RAMP Level 1 certified, and both cover the entire XOP platform, including every solution within it.

SOC 2 Type II, powered by Vanta

SOC 2 Type II

Touchwork is SOC 2 Type II compliant. An independent CPA firm audited how we protect customer data and tested that our controls worked consistently over time, not just on the day of the audit. For your IT and procurement teams, that means fewer security questionnaires and faster approvals.

TX-RAMP

TX-RAMP Level 1

XOP is TX-RAMP Level 1 certified. TX-RAMP is the Texas program that sets security requirements for cloud services used by state agencies, including public universities. Level 1 certification covers services that handle public and non-confidential information, so Texas public institutions can move forward without a separate security review holding up the project.