Axis Communications has bolstered its cloud security credentials by achieving SOC 2® Type 2 attestation, emphasising its dedication to ensuring secure cloud operations essential for both physical security and enterprise functionalities.
This independent assurance underscores the robustness and ongoing effectiveness of the company's cloud security and operational controls.
Continuous validation of cloud security controls
The SOC 2 Type 2 attestation covers Axis Cloud Connect, the company’s open cloud infrastructure, along with several associated cloud-supported solutions such as AXIS Device Manager Edge, AXIS Device Manager Extend, and AXIS Body Worn Live.
This comprehensive audit confirms that Axis' security protocols are consistently applied across various real-world, production environments. The assessment aligns with the Trust Services Criteria set by the American Institute of Certified Public Accountants (AICPA), focusing on security, availability, and confidentiality.
Axis Communications' Program Manager of Cybersecurity, Wayne Dorris, stated, “As physical security systems become increasingly cloud-dependent, and organisations across all industries rely on cloud solutions, customers need confidence that cybersecurity controls don’t just exist—they perform consistently over time. SOC 2 Type 2 provides independent verification that our controls operate effectively in live environments, helping integrators and enterprise customers manage risk, meet compliance requirements, and deploy Axis solutions at scale with confidence.”
Long-term assurance of security controls
Type 1 certification checks controls at a moment; Type 2 tests them over time for stronger assuranceThe recent achievement builds upon Axis Communications’ prior SOC 2 Type 1 certification from August 2024. While the Type 1 certification evaluated the design and implementation of security controls at a particular moment, the Type 2 attestation tests their efficiency over the long term, offering deeper assurance of the systems' reliability and operational integrity.
R&D Director Enterprise and Partner Solutions at Axis Communications, Niklas Holmqvist, remarked, “This attestation is a major milestone for Axis. It validates the robust controls and processes we have in place to safeguard our customers' data and underscores our commitment to delivering scalable and reliable cloud-based solutions grounded in industry best practices around cybersecurity.”
Comprehensive cybersecurity assurance
The SOC 2 Type 2 standard is highly regarded among cloud service providers and offers independent confirmation that Axis Cloud Connect adheres to strict data protection and operational requirements. Aside from supporting physical security initiatives, it assures enterprise clients in sectors like retail, healthcare, manufacturing, and transportation about the reliability and security of Axis’s cloud services.
This audit extends beyond validating single solutions, confirming that security and operational controls are uniformly applied across Axis' entire cloud platform, including solutions like device management and live video functionality. Such comprehensive assessments complement Axis’ extensive cybersecurity initiatives, reinforcing the firm’s end-to-end commitment to safeguarding customer data and operations.
Adapting to the evolving security landscape
Axis Communications' SOC 2 Type 1 and Type 2 attestations provide an extensive picture of the company's cybersecurity status.
These certifications reflect its proactive approach towards building trust, promoting transparency, and forging innovations within a rapidly changing security and technology environment.
As cloud connectivity becomes essential for physical security and business operations alike, Axis Communications—the industry leader in network video—announced it has achieved SOC 2® Type 2 attestation.
This independent assurance validates the long-term effectiveness of Axis’ cloud security and operational controls.
The audit spans Axis Cloud Connect, the company’s open cloud platform, as well as multiple cloud-enabled solutions built with it, including AXIS Device Manager Edge, AXIS Device Manager Extend, and AXIS Body Worn Live, validating that Axis’ controls operate consistently and reliably across real-world, production environments.
Validating cloud security in real-world environments
The third-party assessment confirms that Axis’ security controls are well designed and operate effectively over an extended period, addressing growing customer and industry demands for proven, continuous cybersecurity. The evaluation assessed Axis’ alignment with the Trust Services Criteria established by the American Institute of Certified Public Accountants (AICPA), including security, availability, and confidentiality.
“As physical security systems become increasingly cloud-dependent, and organisations across all industries rely on cloud solutions, customers need confidence that cybersecurity controls don’t just exist—they perform consistently over time,” said Wayne Dorris, program manager, cybersecurity at Axis Communications. “SOC 2 Type 2 provides independent verification that our controls operate effectively in live environments, helping integrators and enterprise customers manage risk, meet compliance requirements, and deploy Axis solutions at scale with confidence.”
From design to long-term effectiveness
This milestone builds on Axis Communications’ SOC 2 Type 1 achievement in August 2024. While the Type 1 review validated the design and implementation of Axis’ controls at a point in time, the Type 2 assessment goes further by evaluating how those controls performed over an extended period, providing deeper assurance of reliability, resilience, and operational discipline.
“This attestation is a major milestone for Axis,” said R&D Director Enterprise and Partner Solutions Niklas Holmqvist, Axis Communications. “It validates the robust controls and processes we have in place to safeguard our customers' data and underscores our commitment to delivering scalable and reliable cloud-based solutions grounded in industry best practices around cybersecurity.”
End-to-end cybersecurity across Axis solutions
SOC 2 Type 2 is widely recognised as the gold standard for cloud service providers and gives system integrators, partners, and end users independent verification that Axis Cloud Connect meets stringent requirements for data protection and operational integrity. While physical security represents a critical use case, SOC 2 Type 2 assures enterprise customers in retail, healthcare, manufacturing, transportation, and other sectors, that Axis Cloud Connect and its solutions provide reliable, secure cloud operations for any cloud-enabled application.
Rather than validating a single solution, the audit confirms that security and operational controls are consistently applied across Axis’ cloud platform and real-world use cases—including device management and live body-worn video.
The assessment complements Axis’ broader cybersecurity program, including built-in security features across its cloud-enabled edge devices, reinforcing the company’s end-to-end approach to protecting customer data and operations. What’s more, achieving SOC 2 Type 2 demonstrates Axis’ commitment to the CISA Security by Design Pledge, showing that cybersecurity design principles are applied consistently and effectively across its products and solutions.
For partners and customers facing heightened scrutiny around vendor risk, procurement, and supply chain security, SOC 2 Type 2 helps streamline risk assessments and provides objective assurance of effective controls in production environments.
Evolving security and technology
Together, Axis’ SOC 2 Type 1 and Type 2 results give a comprehensive view of the company’s cybersecurity posture and underscore its long-term commitment to trust, transparency, and innovation in an evolving security and technology landscape.
