Where is the most recent 「ServiceNow Platform SOC 1 Type 2 Bridge Letter 」?

[Yoshiko3]

Where is  the most recent "ServiceNow Platform SOC 1 Type 2 Bridge Letter " ?

I already could find the pdf file of  "ServiceNow Platform SOC 1 Type 2 Bridge Letter 09-30 2021.pdf ”.

[Community Alums]

HI @Yoshiko ,

You need to register to have access to ServiceNow CORE to get access to those documents if they are not publicly available. However, see the text I highlighted in bold/underlined , since it seems the bridge letter you want will not be available until end Q1 2022.

Request access: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0564067

Reference:

SSAE 18 SOC 1 and SOC 2 Reports

The Service Organizational Control (SOC) framework is an attestation that ServiceNow meets the required standard regarding having controls in place to protect the confidentiality, integrity and availability of our customers’ data in the cloud.

• - SOC 1 focuses on the effectiveness of internal controls that affect the financial reports of customers
• - SOC 2 evaluates controls that are relevant to availability, integrity, security, confidentiality, or privacy.

ServiceNow is audited by a third party and has maintained its SSAE 18 SOC 1 Type 2 attestation since 2011 (SSAE 18 superseded SSAE 16 in 2017). SSAE 18 is aligned with international standard ISAE3402 and replaced the now-deprecated SAS70.

ServiceNow’s SOC 1 report covering the period October 1 (of the prior calendar year) to September 30 (current calendar year) is available via ServiceNow CORE by the end of each calendar year (December).

The SOC 1 report covering the period April 1 to March 31 is available via ServiceNow CORE by the end of each calendar Q2 (June).

ServiceNow has also undertaken an annual SOC 2 Type 2 attestation since 2013, relevant to security, availability and confidentiality controls listed in the AICPA Trust Services Criteria (TSC).

ServiceNow’s SOC 2 report covers the period October 1 (of the prior calendar year) to September 30 (current calendar year) and is available via ServiceNow CORE by the end of each calendar year (December).

A Bridge Letter is provided between audit periods so that the company is covered for the entire year.

ServiceNow’s SOC 1 bridge letter covering the period October 1 (current calendar year) to December 31 (current calendar year) is available on ServiceNow CORE by the end of each calendar Q1 of next year

The SOC 1 bridge letter covering the period April 1 to June 30 is available via ServiceNow CORE by the end of each calendar Q3.

ServiceNow’s SOC 2 bridge letter covers the period October 1 (current calendar year) to December 31 (current calendar year) and is available on ServiceNow CORE by the end of each calendar Q1 of next year.

Mark my answer correct & Helpful, if Applicable.

Thanks,

Sandeep

[Yoshiko3]

Thank you for your response.

Do you know when the bridge letter covering January 1 to March 30 will be issued?

[Community Alums]

There is no official date provided yet.

Glad to see my answer helped you, Kindly mark the answer as Correct & Helpful both such that others can get help.

Thanks,
Sandeep

[Phil Kestenbaum]

I am looking for the updated copy of this letter. Could you kindly post it here?