Wowza’s SOC 2 Type II Report For Security Reviews
Security And Availability Controls, Independently Examined By A-LIGN
Wowza holds a SOC 2 Type II report from an independent CPA firm, A-LIGN, who examined Wowza’s controls against the Security and Availability trust services criteria for the period May 1, 2026 to July 31, 2026, and issued an unqualified opinion. The examination covers Flowplayer OVP, the managed platform Wowza operates, plus how Wowza builds, patches, and supports Wowza Streaming Engine. Security, procurement, and vendor risk teams can request the full report directly from Wowza Information Security by emailing security@wowza.com to move their review forward with tested evidence.
What The Wowza SOC 2 Type II Report Covers
Wowza’s 2026 SOC 2 Type II report documents how controls were operated across a three-month examination period. A-LIGN performed the examination under AICPA attestation standards AT-C section 105 and AT-C section 205, and the report sets out its testing control by control. The scope covers the Flowplayer OVP managed platform Wowza operates, as well as Wowza’s processes for building, patching, and supporting Wowza Streaming Engine. Within the Security and Availability criteria, A-LIGN tested controls across:
- Data protection
- Access management
- Secure development
- Vulnerability management
- Resilience
- Governance
Pair Wowza’s SOC 2 Report With Our ISO/IEC 27001 Certification
Wowza is certified to ISO/IEC 27001:2022 and completed a SOC 2 Type II examination for 2026 with an unqualified opinion, both independently audited by A-LIGN. The ISO/IEC 27001 certificate confirms that Wowza runs a governed information security management system. The SOC 2 Type II report shows how specific controls operated across the examination period. Learn what each credential proves and where the two differ.
Plan Your Security Review With Confidence
Wowza runs its SOC 2 Type II examination annually, and each report covers a defined period. Wowza’s current SOC 2 report covers from May 1 to July 31, 2026. If your review lands after that period, reach out to security@wowza.com.
Evidence your reviewers can verify
Independent Auditor
A-LIGN, an independent CPA firm, performed the examination and issued a clean, unqualified opinion.
Tested Over Time
A Type II examination tests whether controls operated effectively across the full period, so your reviewers see performance over time.
Defined Scope
The report names the trust services criteria, along with the platforms, in scope so your reviewers know exactly what the auditor tested.
A Direct Line To Security
Wowza Information Security owns the report and answers deployment-specific questions at security@wowza.com.
Wowza SOC 2 Type II Report FAQs
Does Wowza have a SOC 2 Type II report?
Yes, Wowza holds a SOC 2 Type II report from an independent CPA firm. A-LIGN examined Wowza’s controls against the Security and Availability trust services criteria for the period May 1, 2026 to July 31, 2026, and issued an unqualified opinion. The report covers Flowplayer OVP, plus how Wowza builds, patches, and supports Wowza Streaming Engine. Wowza runs the examination on an annual cycle.
How do I request Wowza’s SOC 2 Type II report?
Email Wowza Information Security at security@wowza.com. Name the person who should receive the report and describe what the request is for. Wowza issues each copy to a named recipient and logs every request. Anyone in an active conversation with a Wowza account team can also ask that team to submit the request.
Which trust services criteria does Wowza’s SOC 2 report cover?
Wowza’s 2026 SOC 2 Type II report covers the Security and Availability trust services criteria. Security serves as the common criteria in every SOC 2 engagement. Availability addresses whether systems stay available for operation and use as committed. Across both criteria, A-LIGN tested controls for data protection, access management, secure development, vulnerability management, resilience, and governance.
What opinion did A-LIGN issue on Wowza’s SOC 2 Type II examination?
A-LIGN issued an unqualified opinion. The auditor concluded that, in all material respects, Wowza fairly presented its system description, designed its controls suitably, and operated those controls effectively across the examination period. An unqualified opinion, often called a clean opinion, is the strongest result a SOC 2 examination can produce.
Does Wowza’s SOC 2 report cover a Wowza Streaming Engine deployment I host myself?
When you host Wowza Streaming Engine in your own environment, your organization operates the deployment and owns the controls around it. Wowza’s SOC 2 Type II report covers Wowza as the organization that designs, builds, patches, releases, and supports the software. Your own controls and audits cover the deployment itself. For Flowplayer OVP, Wowza operates the platform, so the report covers that service directly.
Does Wowza’s SOC 2 Type II report make my organization compliant with GDPR, HIPAA, or FedRAMP?
Wowza’s SOC 2 Type II report covers Wowza’s own controls and does not make any customer compliant with regulations or frameworks. For questions about a specific framework, email security@wowza.com.
What if my security review is after the SOC 2 report period ends?
Wowza runs its SOC 2 Type II examination on an annual cycle, and the current report covers May 1, 2026 to July 31, 2026. If your review lands well after that period, contact security@wowza.com.
Is Wowza also ISO 27001 certified?
Yes, A-LIGN certified Wowza to ISO/IEC 27001:2022, and the certificate remains valid through August 2029. Visit the Wowza ISO 27001 page for full certificate details, or email security@wowza.com to request the certificate alongside the SOC 2 Type II report.