SOC 2 · PI - Processing Integrity
SOC 2 SOC2-PI1.5: PI1.5 Controls over stored inputs, work in process and outputs
SOC 2 SOC2-PI1.5 covers PI1.5 Controls over stored inputs, work in process and outputs. The held text names 3 evidence records for it, the first being Storage integrity controls (checksums, database constraints). The common gap an assessor flags is Archives unprotected or untested.
Policies and procedures keep inputs, work in progress and outputs in storage fully, correctly and promptly in line with system specifications. Points of focus: stored items are protected from theft, corruption, destruction or deterioration; system records are archived and the archives protected; storage of data is complete, accurate and timely; and records of storage activity are created and kept.
What evidence supports SOC2-PI1.5?
- Processing integrityStorage integrity controls (checksums, database constraints)
- Processing integrityArchive procedure and protection of archives
- Processing integrityStorage activity logs
Where this requirement comes from
This is our own statement of SOC 2 SOC2-PI1.5, read from the copy we hold (issuer free complete copy) and stated in our words, not the standard verbatim. The framework as we hold it.
Common gaps an assessor flags
- Archives unprotected or untested
- Data corruption detected only by customers
- No logs of storage operations
How it maps to ISO 27001:2022
- 5.33 medium Complete and accurate storage of inputs and outputs supports record protection but not retention or legal admissibility.
A link is a topical overlap with a confidence and a reason. It does not establish that meeting one requirement satisfies the other, and it is not certification.