Virta completes a combined SOC 2/ISAE 3000 audit

In September 2025, Virta has successfully completed a combined SOC 2/ISAE 3000 audit. The certifications shows that Virta has standardised and externally validated security management systems and processes in place.

Virta has gone through a comprehensive SOC 2/ISAE 3000 audit, which resulted in a clean report without any deviations that would be impacting Virta’s control system. This is part of yearly SOC 2 Type 2 reports with the first one being completed in 2020.

ISAE 3000 is the International Standard for Assurance Engagements issued by the International Auditing and Assurance Standards Board (IAASB), while SOC 2 is an auditing and compliance framework developed by the American Institute of Certified Public Accountants (AICPA). As SOC 2 is a US-based framework, the SOC 2 report can be performed under ISAE 3000 to provide an internationally recognised attestation.

While SOC 2 compliance isn’t mandatory for EV charging platforms, it is the de facto requirement for businesses handling customer data. If you’re a security-conscious business, SOC 2 compliance should be the minimal requirement for your potential EV charging service provider.

Security requires a 360-degrees approach

Information security is a major concern for any organisation and a top priority for Virta. Our 360-degree approach means that security work is supported and promoted by the whole organisation as we continuously work on maintaining the most stringent controls for protecting and securing customer information.

Another example of our robust security and compliance strategy is the ISO 27001 certificate.

ISO 27001 is an internationally recognised information security standard that takes a comprehensive approach to information security and ensures strict security controls are in place to protect customer data.

Do you want to know more about how we handle security at Virta? Learn more here.