Tidal Control incident
Comparing compliance tools: why a false timeline is costly
Resolved on June 9, 2026.
Promises of ISO 27001 or SOC 2 certification in thirty days are a red flag because both standards require a demonstrably working management system, not just documentation. A SOC 2 Type 2 report cannot comply with the standard without an observation period of at least three months, and a small organisation pursuing ISO 27001 needs a minimum of three months working in a focused way. Tidal Control works exclusively with independent, accredited certification bodies and includes implementation support, automated evidence collection, and EU hosting in its platform.
Update timeline
- resolved Jun 09, 2026, 12:00 PM UTC
Promises of ISO 27001 or SOC 2 certification in thirty days are a red flag because both standards require a demonstrably working management system, not just documentation. A SOC 2 Type 2 report cannot comply with the standard without an observation period of at least three months, and a small organisation pursuing ISO 27001 needs a minimum of three months working in a focused way. Tidal Control works exclusively with independent, accredited certification bodies and includes implementation support, automated evidence collection, and EU hosting in its platform.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services