Skill Struck Achieves SOC 2 Type II Compliance

What That Means for Your School District

Skill Struck has successfully completed its SOC 2 Type II audit, a major milestone that reflects our deep commitment to data privacy and security for K-12 schools.

What is SOC 2 Type II?

The SOC 2 audit is one the highest recognized standards of information security compliance in the world. It was developed by the American Institute of CPAs (AICPA) to allow a third-party auditor to validate a service company’s internal controls with respect to information security. 

‍We obtained our audited SOC 2 Report by partnering with Johanson Group who respectively reviewed our internal controls including policies, procedures, and infrastructure regarding data security, firewall configurations, change management, logical access, backup management, business continuity and disaster recovery, security incident response, and other critical areas. 

Type II is the more comprehensive level. It assesses whether we have the right systems and safeguards in place, and if those systems are actually working over time to protect customer, school, and student data. This process involved:

• Detailed internal reviews of our data security policies and procedures
• Third-party audit assessments to evaluate our technical infrastructure, data handling practices, and risk management processes
• A thorough evaluation of our security measures by a certified CPA firm, which were continually tested to ensure they functioned as intended over an extended period

Why SOC 2 matters for school districts

As K-12 administrators, you’re entrusted with safeguarding student and staff data. The vendors you work with must uphold that trust. SOC 2 Type II compliance provides third-party validation that:

• Skill Struck has strong, reliable systems in place to prevent unauthorized access
• We follow consistent, secure practices over time
• Your students’ and teachers’ information is handled with care, privacy, and professionalism

This level of compliance gives district leaders greater peace of mind and can help simplify your procurement and vendor approval process, especially in states that require or strongly prefer SOC 2-compliant edtech providers.

As your partner in K-12 computer science education, we are here to support you in navigating these requirements and ensuring your district is well-positioned to meet compliance standards.

We are honored to support educators and learners nationwide, and this achievement is just one way we are continuing to raise the bar for security, trust, and transparency in K–12 edtech.

If you have questions about what this means for your district, we would love to talk.

‍