Vista Group is thrilled to share we have achieved SOC 2 Type 2 for Vista Cloud* and movieXchange, with a successful audit from AssuranceLab.

Achieving SOC 2 Type 2 is an important milestone for Vista Group and highlights our commitment to our clients to deliver remarkable solutions that are reliable and secure.

What is SOC 2?

SOC 2 (Service Organisation Controls 2) is an industry-leading compliance standard that demonstrates the design and operating effectiveness of an organisation’s security, risk management, and control practices, through an independent audit evaluating our practices over:

• Security — the protection of our systems and data against unauthorised access.  

• Availability — maintaining the reliability and resilience of our systems and services.

• Confidentiality — safeguarding information through appropriate classification, handling and retention practices in-line with its level of sensitivity.

• Privacy — managing personally identifiable data in-line with individuals’ privacy rights.

How do SOC 2 Type 1 and Type 2 differ?

There are two types of SOC 2 reports. Prior to receiving SOC 2 Type 2, we had SOC 2 Type 1.

• Type 1 focuses on the design effectiveness of system and data security, availability, confidentiality, and privacy processes, which are tested at a specific point in time.

• Type 2 focuses on design and operating effectiveness to attest those processes for system and data security, availability, confidentiality, and privacy are both written to a high standard and followed consistently.

What does SOC 2 mean for you?

SOC 2 attestation demonstrates our commitment to providing our clients with a robust, reliable, and secure cloud solution. Core Confidence is the exemplary environment and service that powers Vista Cloud – allowing exhibitors to focus on delivering exceptional operations and guest experiences confident that they have world-class technology that don’t drain their resources or let them down. We remain committed to investing in the security and confidentiality of their data and continually improving our processes.

What’s next?

SOC 2 compliance is not a one-time achievement—it’s an ongoing commitment. We will continue to maintain and renew our SOC 2 Type 2 compliance annually for Vista Cloud and movieXchange.

We are currently focusing on achieving SOC 2 Type 1 compliance for Movio EQ before the end of the year.  

*This excludes Movio EQ, Numero, Cinema Intelligence and MX Passes