Condado is SOC 2 Type II compliant, covering the Security trust services criteria, following an independent audit by Advantage Partners — more on what that report covers and how to request it here. What it's actually protecting is a different question, and one that looks different in CX and CCaaS than it does in most other software categories.
In most SaaS categories, data lives in one system with a defined boundary. In a contact center environment, it moves constantly, and it moves through more places than most buyers realize.
A single customer interaction can touch:
None of that lives in a single, self-contained system. It flows across CCaaS platforms, CRM systems, telephony providers, and the integration layer connecting all of them — often in real time, often across multiple vendors in the same customer interaction.
Most compliance conversations in CX focus on the platforms themselves; is the CCaaS provider compliant, is the CRM compliant? Those are reasonable questions. But they miss where a lot of the actual data access lives: the integration layer connecting those platforms together.
That's the layer where PII, payment data, and call data cross system boundaries — moving from telephony into CRM, from CRM into reporting, from one vendor's environment into another's. It's also, by nature, the layer with the broadest technical access across the whole stack, since it has to touch every system to do its job.
For Condado, that integration work is the core of what we do. It's also exactly why our SOC 2 Type II report (Security) covers the controls around how we access, move, and handle that data — not just a policy statement, but independent evidence of how those controls performed over a multi-month audit period.
If your contact center technology involves more than one vendor (and for most CX stacks, it does) the compliance question isn't just "is my CCaaS platform compliant" or "is my CRM compliant." It's whether every party with access to that data across the full flow, including whoever is doing the integration work, can show the same thing.
This is especially true for teams in regulated industries like financial services and healthcare, where vendor security reviews already dig into how sensitive data moves between systems, not just where it's stored. A CX stack with multiple connected vendors is precisely the kind of environment those reviews are designed to scrutinize — and it's a different bar than most software categories need to clear, because most software categories don't have this many systems touching the same sensitive data in the same real-time flow. CX and CCaaS environments do, by design.
Condado's SOC 2 Type II report (Security) is available to customers and partners on request through our trust center at trust.condado.com. Reach out to your Condado contact or request access directly.
Condado is SOC 2 Type II compliant (Security), independently verified by Advantage Partners. See what it means for CX and CCaaS buyers and how to request the report.
Condado has become part of One Primero — a consolidated operating brand bringing Condado's contact center expertise and Tricension's technology delivery capability together under one name. Same team, same relationships. New name.
