uSonar Obtains SOC2 Type1 Report Evaluating Internal Controls
~Achieving International Security Standards for Safer and More Reliable Services~

uSonar Co., Ltd. (Headquarters: Shinjuku-ku, Tokyo; Chairperson: Nami Fukutomi; President: Katsuhito Nagatake; hereinafter "uSonar") is pleased to announce that various uSonar services, including PLANSonar and mSonar, have obtained the SOC2 Type1 report, an internationally recognized assurance report on internal controls.

SOC2 stands for "System and Organization Controls 2." It is a framework in which third-party organizations (such as audit firms or certified public accountants) evaluate internal controls related to security for cloud services and other systems, based on the Trust Services Criteria established by the American Institute of Certified Public Accountants (AICPA).
Type1 evaluates whether the design of internal controls is appropriate as of a specific date.
uSonar is also working toward obtaining the Type2 report, which evaluates the operational effectiveness of internal controls over a period of several months or longer.

uSonar provides services that support B2B transactions, such as the management strategy platform "PLANSonar" and the business card & corporate information management application "mSonar".
These various uSonar services have been adopted by nearly 1,000 customers, primarily mid-sized and large enterprises. In recent years, adoption has accelerated among financial institutions that require high levels of security.

Furthermore, as uSonar accelerates its own DX, the company is adopting new technologies and migrating to the cloud, leading to higher security requirements for cloud services. Consequently, in addition to the "ISMS Certification" already acquired and maintained, the company decided it was necessary to obtain the "SOC2 Type1 Report," an internationally recognized assurance report for internal controls.
Previously, when customers adopted uSonar services, it was necessary to exchange information based on individual security check sheets for each company. By providing the SOC2 Type1 Report in advance, we believe we can reduce the verification workload for both parties and allow more customers to use our services with greater peace of mind.

• PLANSonar, mSonar, GuideSonar, SideSonar, Management Sonar, and various APIs

Contact Information Regarding This Matter
uSonar Co., Ltd. Public Relations
Email: ir@usonar.co.jp

* New subscriptions for SideSonar will end in February 2025. Analysis and list creation functions have been transferred to PLANSonar, and CRM/SFA enhancement functions have been transferred to GuideSonar.