SOC2: Our Commitment to Privacy, Protection, and Performance
Securing the Future of Digital Repositories: Discovery Garden’s Commitment to Privacy, Protection, and Performance
At Discovery Garden, security isn’t a checkbox — it’s a core pillar of how we build, deliver, and support digital repositories for our clients. Whether you’re managing a large-scale digital archive or launching your first online collection, we know that trust, data privacy, and uninterrupted access are non-negotiable. That’s why we’ve invested heavily in robust security practices — from formal attestations to real-world performance improvements against automated threats.
SOC 2-Ready: Our Information Security and Privacy Program
In 2024, we partnered with Carbide to design and implement an information security and privacy program aligned with SOC 2 standards. This comprehensive program includes:
- A formal risk management framework
- An incident response plan
- Continuous vulnerability scanning
- Awareness training for staff
- A full suite of security and privacy policies embedded across both operations and product development
Discovery Garden has completed a third-party Security Program Implementation Review. Carbide’s assessment confirms that we’ve achieved a high level of operational readiness and are well-positioned for a successful audit in the future. Read the attestation letter here.
“Discovery Garden Inc. has invested substantial time and resources into information security and data privacy. The organization has made investments in technical employees, third-party security experts, security tools as well as a substantial time investment from senior management to ensure the concepts of security and privacy by design are deployed organization-wide. Security and privacy have been a priority articulated from the CSuite/founder level of the company downward.”
— Carbide Security Attestation, June 2025
This readiness reflects our deep commitment to protecting client data and supporting institutions with security and privacy by design.
Looking Ahead
Security is a journey, not a destination. At Discovery Garden, we’ll continue to:
- Conduct regular internal reviews and tabletop incident simulations
- Expand our detection and mitigation tools for new threat vectors
- Invest in staff training and industry certifications
We’re proud to support institutions that safeguard our cultural and academic heritage — and we believe they deserve the same level of protection as any enterprise cloud platform.
Ready to see what Islandora can do for your organization?
Whether you’re managing a single repository or supporting a multi-institution consortium, Islandora offers the flexibility, scalability, and support you need. Contact Discovery Garden to schedule a demo, start a project discovery session, or learn more about how we can help you build a future-proof digital repository.
