Ricoh CloudStream secures SOC 2 Type II audit status

Ricoh has announced that its cloud-based service, RICOH CloudStream, has successfully completed a SOC 2 Type II audit. This certification is widely recognised as a benchmark for organisations to demonstrate rigorous internal controls regarding the protection and privacy of customer data.

The company stated that the audit process confirmed CloudStream's security controls were not only effectively designed but also consistently maintained throughout the specified examination period. Ricoh characterised the achievement as a vital external validation of its overarching commitment to security and compliance within its cloud operations.

SOC 2 is an assurance framework developed by the American Institute of Certified Public Accountants (AICPA). It is designed to assess how a service organisation safeguards customer data based on a specific set of Trust Services Criteria, which encompass security, availability, processing integrity, confidentiality, and privacy.

According to Ricoh, the audit for CloudStream focused specifically on the Security category, ensuring the platform's defences are robust enough to protect against unauthorised access or data breaches.

Security assurance

Vendor security assessments and compliance requirements have become a regular part of procurement for cloud services, particularly in regulated sectors and for services that connect to corporate identity systems and endpoint devices. SOC 2 reports often form part of customer due diligence and supplier risk management.

Ricoh positioned the audit result in the context of continued migration of business systems to cloud services. The company said organisations have increased scrutiny of data protection and governance as they move critical workflows off premises.

"Completing the SOC 2 Type II audit validates our efforts to deliver secure and compliant digital services for customers around the world", said Taro Takamatsu, General Manager of Digital Services Business Division at Ricoh Company, Ltd.

"We are proud to now offer Ricoh CloudStream with renewed confidence empowering organisations to modernise their print and device infrastructure," said Takamatsu.

Product scope

Ricoh has described RICOH CloudStream as a comprehensive, cloud-based platform for print, scan, and device management. A key feature of the service is its ability to support multi-vendor environments, allowing organisations to manage hardware from various manufacturers through a single interface.

Positioned as a central component of IT operations for the hybrid work era, Ricoh noted that CloudStream is specifically engineered for use across distributed workplaces and mixed device fleets. This flexibility ensures that employees can maintain productivity whether they are in the office or working remotely, whilst IT teams retain oversight of diverse hardware ecosystems.

The company said the SOC 2 report provides assurance to customers that CloudStream controls are effectively designed and consistently operated. Ricoh said this matters for organisations in highly regulated industries.

Standards alignment

Ricoh has reaffirmed its commitment to reinforcing information security and maintaining alignment with rigorous international standards. The company stated its ongoing intention to deliver trusted solutions that support critical business operations in an increasingly digital landscape.

As part of this transparency, Ricoh confirmed that the SOC 2 Type II report for CloudStream is now available to clients and partners upon request.