uSonar Obtains SOC2 Type1 Report Evaluating Internal Controls
— Achieving International Security Standards for Safer and More Secure Services —

uSonar Co., Ltd. (Headquarters: Shinjuku-ku, Tokyo; Chairperson: Nami Fukutomi; President: Katsuhito Nagatake; hereinafter "uSonar") is pleased to announce that various uSonar services, including PLANSonar and mSonar, have obtained the SOC2 Type1 report, an internationally recognized assurance report for internal controls.

SOC2 stands for "System and Organization Controls 2." It is a framework in which third-party organizations (such as audit firms or certified public accountants) evaluate internal controls related to security for cloud services and similar offerings, based on the Trust Services Criteria established by the American Institute of Certified Public Accountants (AICPA).
Type1 evaluates whether the design of internal controls is appropriate as of a specific base date.
uSonar is also working toward obtaining the Type2 report, which evaluates the operational effectiveness of internal controls over a period of several months or longer.

uSonar provides services that support B2B transactions, including the corporate strategy platform PLANSonar and the business card & corporate information management application mSonar.
These various uSonar services have been adopted by nearly 1,000 customers, primarily mid-sized and large enterprises. In recent years, adoption has accelerated among financial institutions that require high security standards.

Furthermore, as uSonar accelerates its own DX, the company is adopting new technologies and migrating to the cloud. With the rising security requirements for cloud services, we determined that in addition to the ISMS certification we have already acquired and maintained, it was necessary to obtain the SOC2 Type 1 report, an internationally recognized assurance report for internal controls.
Previously, when customers adopted uSonar services, it was necessary to exchange information based on individual security check sheets for each company. Moving forward, by providing the SOC2 Type 1 report in advance, we believe we can reduce the verification workload for both parties and allow more customers to use our services with greater peace of mind.

• PLANSonar, mSonar, GuideSonar, SideSonar, Management Sonar, and various APIs

Contact Information Regarding This Matter
uSonar Co., Ltd. Public Relations
Email: ir@usonar.co.jp

* New subscriptions for SideSonar will end as of February 2025. Analysis and list creation functions have been transferred to PLANSonar, and CRM/SFA enhancement functions have been transferred to GuideSonar.