Tartan’s Product Update — May 2023

Hello there,

Welcome to our May 2023 product update. This month marks an important milestone for Tartan—one that reinforces our long-term commitment to security, compliance, and customer trust.

We Are Now SOC 2 Compliant

We’re pleased to announce that Tartan is now SOC 2 compliant, achieved in a remarkably short period since inception.

Security has always been a foundational priority for us. As a company working with sensitive personal, financial, and employment data, we recognize the responsibility that comes with operating critical infrastructure for BFSI and fintech platforms. Achieving SOC 2 compliance reflects our commitment to building security and governance into the core of our systems from day one.

This milestone is a direct result of deliberate choices made early on—embedding strong internal controls, access management, audit readiness, and data protection practices into how Tartan is designed and operated. Full credit goes to the founding team for making security and compliance part of Tartan’s DNA.

What SOC 2 compliance means

For those unfamiliar, SOC 2 is a rigorous, independently audited certification that evaluates how an organization safeguards customer data. It validates controls across key trust principles such as:

• Security

• Availability

• Confidentiality

• Processing integrity

SOC 2 compliance confirms that our systems, processes, and operational practices meet strict standards for protecting sensitive information.

Why this matters for our customers

• Stronger protection of customer and end-user data

• Increased confidence during security reviews and audits

• Easier vendor onboarding for regulated enterprises

• A verification partner built for long-term scale and trust

This certification further strengthens Tartan’s position as a reliable, enterprise-ready partner for organizations operating in regulated environments.

We’re proud of this achievement and see it not as a finish line, but as a baseline. As we continue to grow, security and compliance will remain central to how we build, ship, and scale our products.