Jitterbit, a global leader in empowering business transformation through automation, offers a single, unified platform to integrate systems, automate workflows and build applications.
Jitterbit successfully achieved SOC 1, SOC 2, ISO/IEC 27001, 42001, and other compliance initiatives with the help of A-LIGN’s audit expertise and Drata’s compliance automation platform.
The challenge
Jitterbit supports many large enterprises’ backend operations, which means that ensuring customer trust is of vital importance.
The Jitterbit team had three priorities for their security program: Demonstrating due diligence, ensuring compliance, and safeguarding sensitive data. In the past, Jitterbit worked with another audit provider, but found the quality of the audit was not up to par. Their previous audit team did not have the knowledge to explain why certain controls were rejected, which resulted in duplicated manual work for the Jitterbit team.
Jitterbit also required a GRC platform to help them prepare for the audit process and automate their audit workflows. Its previous GRC platform lacked the proper automation features the team required to make the audit process more efficient, resulting in roadblocks and delays during projects.
To help achieve their compliance goals, Jitterbit sought an experienced audit partner with ample expertise coupled with high-powered technology to automate workflows and continuously improve their compliance program over time.
The solution
To meet their compliance goals, Jitterbit engaged A-LIGN for their SOC 2 report, based on a recommendation from a security advisory company.
The Jitterbit team sought a thorough SOC 2 audit, not just a superficial review. They chose A-LIGN for their expertise in SOC 2 processes and controls. A-LIGN’s guidance helped Jitterbit understand the rationale behind required controls, fostering a partnership that drove continuous operational improvements. This approach aligned with Jitterbit’s commitment to enhancing their security practices beyond compliance.
Jitterbit appreciated how the collaboration, communication, and expertise of A-LIGN’s audit team fostered a more efficient audit process.
To complement A-LIGN’s expertise and fulfill their GRC platform needs, Jitterbit partnered with Drata to enhance their audit operations. Jitterbit’s team found great value in Drata’s ability to automate 40% of the audit process, real-time data collection, and user activation features, which significantly eased the previously manual workloads.
Drata’s real-time monitoring feature allows for immediate issue correction, avoiding future pitfalls. Unlike point-in-time snapshots, which may reveal issues months later, real-time monitoring provides a continuous pulse throughout the year, simplifying the audit process.
Additionally, Jitterbit appreciates the wide range of controls provided by Drata, which can be purchased and mapped within the system. By leveraging A-LIGN’s control numbers and mappings, the Jitterbit team can get a head start in the audit process. Coupled with Drata, Jitterbit can seamlessly position evidence with A-LIGN controls.
Because of the great success realized in their initial SOC 2 audit, Jitterbit has grown their compliance portfolio to include several ISO frameworks, and is working towards achieving NIS 2 compliance to build trust with its customers in the EU.
Together with A-LIGN and Drata, Jitterbit is steadfast in their mission to demonstrate trust with their enterprise customers, cultivate continuous improvement, and efficiently automate their audit operations.
About Jitterbit, Inc.
Jitterbit empowers business transformation with low-code enterprise solutions for integration and application development. Jitterbit combines and simplifies the power of iPaaS, APIM, EDI, and LCAP to amplify the value of on-premise, cloud-based, and SaaS systems and accelerate the digital journey. Organizations around the globe rely on Jitterbit’s experience and expertise to help them automate critical business processes and build applications to futureproof their business. Learn more at www.jitterbit.com.
About Drata
Drata is the world’s most advanced security and compliance automation platform with the mission to build trust across the cloud. With Drata, thousands of companies streamline over 20 compliance frameworks—such as SOC 2, ISO 27001, GDPR, and more—through continuous, automated control monitoring and evidence collection, resulting in a strong security posture, lower costs, and less time spent preparing for annual audits. The company is backed by ICONIQ Growth, Notable Capital, Alkeon Capital, Salesforce Ventures, Cowboy Ventures, S Ventures, Leaders Fund, Okta Ventures, SVCI, SV Angel, Intuit Ventures, and many key industry leaders. For more information, visit www.drata.com.