Insights

GT Clocks Completes SOC 2 Audit

GT Clocks has successfully completed both SOC 1 Type II and SOC 2 Type II examinations.

Home » Insights » GT Clocks Completes SOC 2 Audit

Colin Leatherbarrow


President

Security isn’t an afterthought in workforce management – it’s the foundation. When businesses trust us with their time and attendance data, access control records, and employee information, they’re placing confidence in our ability to protect what matters most.

GT Clocks has successfully completed both SOC 1 Type II and SOC 2 Type II examinations.

The SOC 2 Type II validates our operational controls across Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Completed on January 9, 2026, and conducted by A-LIGN, this certification validates that our infrastructure meets the highest standards for protecting customer data.

Why SOC 2 Matters

SOC 2 is an independent audit framework established by the American Institute of Certified Public Accountants (AICPA). It evaluates how service organizations handle customer data through five distinct criteria:

  • Security: Protection against unauthorized access to systems and data
  • Availability: Systems operate as needed for business operations
  • Processing Integrity: Data processing is complete, valid, accurate, and authorized
  • Confidentiality: Sensitive information is protected throughout its lifecycle
  • Privacy: Personal information is collected, used, retained, and disclosed appropriately

Achieving certification across all five criteria represents the comprehensive standard. 

Built for the Modern Workforce

“For over three decades, GT Clocks has built our reputation on reliability and innovation,” says Colin Leatherbarrow, President. “Our SOC 2 certification is the latest example of our commitment to meeting the evolving security expectations of our customers across the US, UK, and international markets.”

Paul Smith, Grosvenor Technology’s Head of Compliance and PMO, commented: “Securing a workforce requires more than just software firewalls; it demands a unified approach to infrastructure. Achieving compliance across all five Trust Services Criteria validates that our security governance is embedded in every layer of our operation.”

The certification aligns with our broader technology strategy. As we expand AI capabilities through GT Labs and introduce innovations like GT Tablet, maintaining rigorous security standards becomes increasingly critical. 

Privacy by Design

Biometric data presents distinct privacy considerations. Our systems are built with privacy-first architecture – we don’t store actual fingerprints or facial images. Instead, we use secure templates that can’t be reverse-engineered, further protecting employee privacy while maintaining the security benefits of biometric verification.

This approach reduces risk in the process, which is in line with privacy regulations globally and gives businesses the additional protections against ‘buddy punching’ that they need. It’s the foundation that makes features like contactless facial recognition and fingerprint verification both secure and compliant.

The Foundation for What’s Next

SOC 2 achievement isn’t a destination – it’s a commitment to ongoing vigilance. As we develop our solutions, expand cloud capabilities, and introduce new hardware, this framework ensures security remains central to every decision.

The future of workforce management depends on accurate, real-time data. That future only works if businesses can trust the systems collecting, processing, and protecting that data.

This certification validates that trust.

Colin Leatherbarrow

Written by Colin Leatherbarrow, President

Colin has over 25 years’ experience within the Security and Identity industry. He began his career as a developer and has had numerous promotions before becoming a Director. In November 2017, he joined GT Clocks as a Technical Director, before coming the Chief Technology Officer and in November 2022 was deservedly promoted to President. 

Expertise

Some of Colin’s greatest achievements include the introduction of a deep lean approach to operating the business and building a culture with a real focus on quality and compliance, such as introducing ISO27001. On the product side then undoubtedly driving the development of key new products such as GT4, GT8 and GT Connect which are all at the core of our growth strategy.