Employee Performance

The Employee Performance control refers to the existence of an evaluation of your employees on at least an annual basis. These evaluations should be conducted by managers or designated personnel, and all employees should be evaluated using the same criteria and documented.

If an employee is not performing in a way that fulfills expectations and job requirements, you can implement a Performance Improvement Plan (PIP). It is important to have a template in place in the event it is needed. If you do not have any employees on a PIP, you will use this template to satisfy this evidence item for your SOC2 audit.

What does evidence look like for this control?

This control has multiple evidence items linked:

1. Employee List:

   1. For a Type 2 audit, the auditor will use this list to determine which new hires they will request signed AUPs for. This evidence item can be provided via our HRIS integration.

2. Performance Review:

   1. For a Type 1 audit, upload the most recent completed performance review.

   2. For a Type 2 audit, the auditor will select the specific sampled employees they want to see Performance Reviews for. They will select these sampled employees from the Employee List evidence item.​

      Annual Performance Review Example

3. Performance Improvement Plan

   1. For a Type 1 audit, upload the most recent completed Performance Improvement Plan form. If you do not have any employees on a PIP, please upload the template.

   2. For a Type 2 audit, upload a PIP form filled out during your monitoring period, if there has been one.

      Performance Improvement Plan Example

How to use the examples:

• Click on the link above to access the example

  • If you are a Google Workplace organization, make a copy by going to File > Make a copy

  • If you are not a Google Workplace organization, download a copy by going to File > Download and selecting your preferred file type (available as DOCX, PDF, and more)

• Review and then remove instructional text

• Save in a centralized place

• Attach to evidence either through Integrations, Automated Collection, or direct upload

If you need help using the examples, please let us know.