Vibemonitor, Inc., the company behind Beryl, has received its SOC 2 Type 2 report. Advantage Partners, an independent audit firm, examined the Beryl Software Reliability Platform over a three month observation period (April 2 to July 2, 2026) and issued the report on August 26, 2026 with an unqualified opinion and zero testing exceptions.

Why this matters for a testing platform

Beryl is not a bystander to your infrastructure. Our customers point us at their staging and production environments, and our agents sign in with test accounts, run real browser sessions, and store test plans and results. That level of access deserves a higher bar than a privacy policy and a promise. SOC 2 Type 2 is the strongest version of that bar: unlike a Type 1, which checks that controls exist at a point in time, a Type 2 verifies that they actually operated, continuously, over the whole observation window.

We completed our SOC 2 Type 1 in June 2026 and moved straight into the Type 2 window rather than waiting a year. The auditor found no exceptions in any tested control.

What was verified

The report covers the AICPA security trust services criteria across the platform: infrastructure, organizational, and product security, internal procedures, and data handling. A few of the controls in daily operation:

Encryption everywhere: AES-256 at rest, TLS 1.2+ in transit
Strict workspace isolation, so no customer's data is ever visible to another tenant
Automatic masking of PII and sensitive values in logs and traces
Least-privilege access to production, with unique authentication enforced
Tested continuity and disaster recovery plans

None of this was built for the audit. It is how the platform runs, and you can watch it run: our trust center at trust.beryl.so publishes the live status of 70+ continuously monitored controls, updated hourly through Vanta.

Our partners

Vanta automated our evidence collection and powers our continuous monitoring and trust center. Advantage Partners, our audit firm, confirmed our readiness and ran an efficient, rigorous examination. Both made a first Type 2 far less painful than its reputation.

Getting the report

SOC 2 reports are restricted-use documents, so we share them under NDA. Request access at trust.beryl.so, where the Type 1 and Type 2 reports are both available, or write to [email protected]. Security questions get a response within 24 hours.

Compliance is a floor, not a finish line. The controls stay monitored, the audits become annual, and the trust center stays public.