Skip to main content
Valimail logo

Valimail

SOC 2 evidence

Protect your business from phishing and spoofing 4x faster with Valimail’s automated DMARC, DKIM, and SPF email authentication

valimail.comIdentity and accessLast verified 2 Nov 2026
SOC 2 mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

Valimail and SOC 2

Valimail states it holds a SOC 2 Type II report. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states SOC 2 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
2 Nov 2026SOC 2
Live page Snapshotsha256 fbe6978feb
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026SOC 2
Live page Snapshotsha256 60245bdf68
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026SOC 2
Live page Snapshotsha256 d7d993446d
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026SOC 2
Live page Snapshotsha256 0589b5e2e2
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026SOC 2
Live page Snapshotsha256 3237d7dd83
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026SOC 2
Live page Snapshotsha256 92ba21bed3
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026SOC 2
Live page Snapshotsha256 4376d3bb14
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026SOC 2
Live page Snapshotsha256 e2fdba093e
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026SOC 2
Live page Snapshotsha256 dd80a72adc
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026SOC 2
Live page Snapshotsha256 f4b8eab038
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026SOC 2
Live page Snapshotsha256 7931bb9959
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026SOC 2
Live page Snapshotsha256 892a2909c1
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026SOC 2
Live page Snapshotsha256 f02549d3bf
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026SOC 2
Live page Snapshotsha256 4962094671
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026SOC 2
Live page Snapshotsha256 493b65462f
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026SOC 2
Live page Snapshotsha256 ae4bdfea7a
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026SOC 2
Live page Snapshotsha256 2a19504d10
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026SOC 2
Live page Snapshotsha256 976b14c7d5
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026SOC 2
Live page Snapshotsha256 54dcde1df7
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026SOC 2
Live page Snapshotsha256 d6d720e536
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026SOC 2
Live page Snapshotsha256 657c549062
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026SOC 2
Live page Snapshotsha256 611aa3edaa
Vendor-statedVendor states SOC 3 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
2 Nov 2026SOC 3
Live page Snapshotsha256 fbe6978feb
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026SOC 3
Live page Snapshotsha256 60245bdf68
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026SOC 3
Live page Snapshotsha256 d7d993446d
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026SOC 3
Live page Snapshotsha256 0589b5e2e2
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026SOC 3
Live page Snapshotsha256 3237d7dd83
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026SOC 3
Live page Snapshotsha256 92ba21bed3
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026SOC 3
Live page Snapshotsha256 4376d3bb14
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026SOC 3
Live page Snapshotsha256 e2fdba093e
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026SOC 3
Live page Snapshotsha256 dd80a72adc
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026SOC 3
Live page Snapshotsha256 f4b8eab038
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026SOC 3
Live page Snapshotsha256 7931bb9959
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026SOC 3
Live page Snapshotsha256 892a2909c1
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026SOC 3
Live page Snapshotsha256 f02549d3bf
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026SOC 3
Live page Snapshotsha256 4962094671
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026SOC 3
Live page Snapshotsha256 493b65462f
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026SOC 3
Live page Snapshotsha256 ae4bdfea7a
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026SOC 3
Live page Snapshotsha256 2a19504d10
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026SOC 3
Live page Snapshotsha256 976b14c7d5
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026SOC 3
Live page Snapshotsha256 54dcde1df7
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026SOC 3
Live page Snapshotsha256 d6d720e536
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026SOC 3
Live page Snapshotsha256 657c549062
Valimail trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026SOC 3
Live page Snapshotsha256 611aa3edaa

What is not public

  • The report period is not public, so CertReports cannot say whether the Valimail SOC 2 report covers the last 12 months.
  • The audit firm is not stated in any public source CertReports has captured.
  • Trust services criteria in scope, carve-outs and bridge-letter status are only in the restricted-use report, which CertReports never hosts.
What SOC 2 means, and what it does not

SOC 2 reports are restricted-use and are never "certifications". A Type II report covers a period; freshness is the period end plus a bridge letter of at most three months. "SOC 2 ready" and "in progress" are not reports. No public SOC 2 registry exists; the strongest registry-grade signal is a CSA STAR Level 2 attestation, then a public SOC 3.

Read the SOC 2 guide and browse all vendors with evidence

Questions buyers ask

Is Valimail SOC 2 certified?

No organisation is "SOC 2 certified": SOC 2 is an attestation report issued by a CPA firm, not a certification. Valimail states it holds a SOC 2 Type II report as of 2 Nov 2026.

How do I get the Valimail SOC 2 report?

SOC 2 reports are restricted-use documents shared under NDA. Request it through the Valimail trust centre or security page; CertReports links to it and never hosts the report.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.

Alternatives with SOC 2 evidence

Similar vendors (shared product tags or the Identity and access category) whose SOC 2 row is verified or vendor-stated, ranked by similarity.

All articles