15-Second summary
After completing System and Organization Controls (SOC) 2 Type 1, Feedly has completed its SOC 2 Type 2 examination verified by A-LIGN. The audit confirms that Feedly’s controls for Security, Availability, and Confidentiality operated effectively throughout the examination period. For CTI teams and security organizations trusting Feedly with their intelligence workflows, this is the formal, audited proof that those controls work.
Overview
Security teams trust Feedly with their most sensitive work like tracking threat actors, monitoring vulnerabilities, and surfacing intelligence that informs real organizational decisions. That trust has always driven how we build and operate. SOC 2 Type 2 makes it auditable.
What is SOC 2 Type 2?
SOC 2 is an examination framework established by the American Institute of Certified Public Accountants (AICPA). It evaluates whether a company’s systems and controls reliably protect customer data across five trust service categories: security, availability, processing integrity, confidentiality, and privacy.
Type 2 is the harder bar. A Type 1 audit confirms that controls exist at a single point in time. Type 2 confirms that those controls operated effectively over an extended period. In our case, we were already Type 1 verified and are now verified for Type 2 by A-LIGN, the leading cybersecurity compliance auditor trusted by more than 4,000 global organizations.
What our audit covered
Our SOC 2 Type 2 report covers three trust service categories for the Feedly system:
- Security: protecting the system against unauthorized access, both physical and logical
- Availability: ensuring the system is available for operation and use as committed
- Confidentiality: protecting information designated as confidential
The examination period ran from January 1, 2026 to March 31, 2026, and the report was issued on April 20, 2026.
Why this matters for CTI teams
The organizations using Feedly Threat Intelligence are often in industries where data security is a requirement. Financial institutions, government contractors, healthcare organizations, and critical infrastructure teams operate under strict compliance mandates. Their procurement and legal teams need documented proof that the tools in their environment meet the bar.
SOC 2 Type 2 gives your security and compliance teams something concrete: an independent, audited report that documents exactly how Feedly protects your data. It removes a friction point from the procurement process and gives internal champions a clear answer when IT or InfoSec asks “how do we know Feedly is secure?”
Security has been foundational to how we build Feedly from the start. SOC 2 Type 2 is the formal verification of that commitment, not just for our current customers, but for every security team evaluating whether Feedly belongs in their stack.
What comes next
SOC 2 Type 2 is an ongoing commitment. It requires annual re-examination, which means our controls are continuously monitored. As Feedly grows with new integrations, new AI capabilities, new enterprise customers, SOC 2 gives us a structured way to make sure security keeps pace with every change we ship.
Access the report
If you’re a Feedly customer and need a copy of our SOC 2 Type 2 report for your security review or procurement process, reach out to your Account Executive to download the full report.
If you’re evaluating Feedly for your organization and want to know more about our security posture and features, contact our team here: sales@feedly.com
Try Feedly Threat Intelligence
Go from signals to tailored intelligence in minutes.
Get Started for Free
FAQs
SOC 2 Type 2 is an independent audit that confirms a company’s security controls were not only properly designed but actually operating effectively over a defined period of time. It’s issued under the AICPA’s Trust Services Criteria framework and is widely recognized as a gold standard for cloud and SaaS security compliance.
What’s the difference between SOC 2 Type 1 and Type 2?
A Type 1 report confirms that security controls exist and are designed appropriately at a single point in time. A Type 2 report goes further as it verifies that those controls operated consistently and effectively over an extended period. Type 2 is the more rigorous of the two.
Which trust service categories does Feedly’s SOC 2 cover?
Feedly’s SOC 2 Type 2 report covers three categories: Security, Availability, and Confidentiality. These address how we protect the system from unauthorized access, maintain uptime commitments, and handle confidential information.
What period does Feedly’s SOC 2 Type 2 report cover?
The examination period runs from January 1, 2026 to March 31, 2026. The report was issued on April 20, 2026.
Who conducted Feedly’s SOC 2 audit?
The audit was conducted by A-LIGN, an independent cybersecurity compliance firm trusted by more than 4,000 organizations globally and the number one issuer of SOC 2 reports.
How do I request a copy of Feedly’s SOC 2 report?
The full report is available to customers and prospects under NDA. If you’re a current customer, reach out to your account team. If you’re evaluating Feedly, contact us here and mention you’d like to review the report.
Is Feedly SOC 2 compliant for enterprise use?
Yes. Feedly’s SOC 2 Type 2 examination confirms that the Feedly Threat and Market Intelligence system meets enterprise-grade security, availability, and confidentiality standards, making it suitable for use in regulated industries including financial services, healthcare, government contracting, and critical infrastructure.
Does Feedly renew its SOC 2 Type 2 examination?
Yes. SOC 2 Type 2 is not a one-time examination, it requires ongoing audits to maintain. Feedly is committed to continuous compliance and will renew the examination annually.
