--- title: Tuist is now SOC 2 Type II compliant | daily.dev description: Tuist announces it has achieved SOC 2 Type II compliance, a long-term audit proving consistent security practices over several months rather than a one-time... canonical: https://daily.dev/posts/tuist-is-now-soc-2-type-ii-compliant-slpnrpbei twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Tuist is now SOC 2 Type II compliant | daily.dev og:description: Tuist announces it has achieved SOC 2 Type II compliance, a long-term audit proving consistent security practices over several months rather than a one-time... og:url: https://daily.dev/posts/tuist-is-now-soc-2-type-ii-compliant-slpnrpbei og:image: https://api.daily.dev/og/posts/sLPnRPbeI.png og:image:alt: Tuist is now SOC 2 Type II compliant og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Tuist is now SOC 2 Type II compliant **[ Tuist ](https://daily.dev/sources/tuist-blog)** · 5 min read · 0 upvotes · 0 comments ## Summary Tuist announces it has achieved SOC 2 Type II compliance, a long-term audit proving consistent security practices over several months rather than a one-time check. The post explains why the company pursued the certification, how it chose Vanta as its compliance automation tool over alternatives requiring intrusive GitHub permissions, how it selected an auditor, and how it prepared by tracking device security, policy enforcement, and vendor security. Tuist also made its security policies public in its handbook and is launching a Security Center where users can request the audit report and contact the security team. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the difference between SOC 2 Type I and Type II compliance? SOC 2 Type I is a one-time assessment of security policies and controls at a single point in time, while Type II is a long-term audit lasting six to twelve months that proves those controls are consistently followed over time. Type II demonstrates that security practices are baked into daily operations rather than just documented on paper. _Teams weighing compliance frameworks can track real-world audit experiences like this on daily.dev._ ### Why did Tuist choose Vanta over other SOC 2 compliance automation tools? Tuist chose Vanta because it offered the best automation, integrated smoothly with its existing stack of Supabase, GitHub, Google Workspace, and Tigris, and did not require overly intrusive permissions. Some competing tools demanded full GitHub access, which Tuist was unwilling to grant, making Vanta the more practical fit. _Developers picking compliance tooling for their own stack can find comparisons like this on daily.dev._ ## Similar posts on daily.dev - [10 Best SOC 2 Compliance Software for 2026](https://daily.dev/posts/10-best-soc-2-compliance-software-for-2026-jzn8ubn9t) · The Next Web · 0 upvotes · 0 comments - [SOC 2 Type 1 and Type 2 Compliance with Aikido](https://daily.dev/posts/soc-2-type-1-and-type-2-compliance-with-aikido-yc2hwdaa7) · Aikido Security · 0 upvotes · 0 comments - [Halo Security Achieves SOC 2 Type II Compliance, Demonstrating Sustained Security Excellence Over Time](https://daily.dev/posts/halo-security-achieves-soc-2-type-ii-compliance-demonstrating-sustained-security-excellence-over-ti-n1mo2kwbc) · Security Boulevard · 1 upvotes · 0 comments --- Tags: [#compliance](https://daily.dev/tags/compliance), [#tuist](https://daily.dev/tags/tuist), [#xcode](https://daily.dev/tags/xcode) [View this post on daily.dev](https://daily.dev/posts/tuist-is-now-soc-2-type-ii-compliant-slpnrpbei) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Tuist is now SOC 2 Type II compliant","url":"https://daily.dev/posts/tuist-is-now-soc-2-type-ii-compliant-slpnrpbei","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/tuist-is-now-soc-2-type-ii-compliant-slpnrpbei"},"datePublished":"2026-08-23T12:20:00.718Z","dateModified":"2026-10-14T02:31:49.102Z","description":"Tuist announces it has achieved SOC 2 Type II compliance, a long-term audit proving consistent security practices over several months rather than a one-time...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7c8b37f0cc71eecca93f88641f0772a4?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7c8b37f0cc71eecca93f88641f0772a4?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"\n Tuist\n ","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"\n Tuist\n ","logo":"https://media.daily.dev/image/upload/s--3AYDH23h--/f_auto,q_auto/v1787487506/logos/tuist-blog?_a=BAMAMicg0","url":"https://daily.dev/sources/tuist-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/tuist-is-now-soc-2-type-ii-compliant-slpnrpbei","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"compliance,tuist,xcode","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"\n Tuist\n ","item":"https://daily.dev/sources/tuist-blog"},{"@type":"ListItem","position":3,"name":"Tuist is now SOC 2 Type II compliant"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/tuist-is-now-soc-2-type-ii-compliant-slpnrpbei#faq","mainEntity":[{"@type":"Question","name":"What is the difference between SOC 2 Type I and Type II compliance?","acceptedAnswer":{"@type":"Answer","text":"SOC 2 Type I is a one-time assessment of security policies and controls at a single point in time, while Type II is a long-term audit lasting six to twelve months that proves those controls are consistently followed over time. Type II demonstrates that security practices are baked into daily operations rather than just documented on paper. Teams weighing compliance frameworks can track real-world audit experiences like this on daily.dev."}},{"@type":"Question","name":"Why did Tuist choose Vanta over other SOC 2 compliance automation tools?","acceptedAnswer":{"@type":"Answer","text":"Tuist chose Vanta because it offered the best automation, integrated smoothly with its existing stack of Supabase, GitHub, Google Workspace, and Tigris, and did not require overly intrusive permissions. Some competing tools demanded full GitHub access, which Tuist was unwilling to grant, making Vanta the more practical fit. Developers picking compliance tooling for their own stack can find comparisons like this on daily.dev."}}]} ```