---
title: Efinity Case Study
---

[![tuxcare-logo-full-reverse](https://meet.tuxcare.com/hubfs/tuxcare-email-assets/tuxcare-logo-full-reverse.svg "tuxcare-logo-full-reverse")](https://tuxcare.com/)

Case Study

# Using TuxCare Services to achieve Compliance Certification

Compliance is easier with automation.  
Learn how an F-500 company’s audit requirements were achieved in 2 weeks

[Contact TuxCare](https://meet.tuxcare.com/success-stories/efinity#hs_cos_wrapper_widget_1652371555187)

### Client: [Efinity](https://efinity.com/) | Software insurance

1 min read

![efinity-icon-1](https://meet.tuxcare.com/hs-fs/hubfs/efinity-icon-1.png?width=100&height=100&name=efinity-icon-1.png "efinity-icon-1")

## The Goal

To achieve SOC2 certification requirements without downtime.

![efinity-icon-2](https://meet.tuxcare.com/hs-fs/hubfs/efinity-icon-2.png?width=100&height=100&name=efinity-icon-2.png "efinity-icon-2")

## The Result

Regular security updates to Linux kernels without interruption.

![efinity-icon-3](https://meet.tuxcare.com/hs-fs/hubfs/efinity-icon-3.png?width=100&height=100&name=efinity-icon-3.png "efinity-icon-3")

## TuxCare Services used by Efinity

[KernelCare Enterprise](https://tuxcare.com/live-patching-services/kernelcare-enterprise/)

The Client

Efinity is a software consultancy and development company with hubs in the US and the UK. They provide Quote & Bind systems for more than 20 insurance product lines.

Efinity deals with clients in 14 countries. This means that the system has to deal with a lot of data; much of it is personal data. The system must be watertight.

[1,500+ enterprises trust TuxCare with their systems - see the list](https://tuxcare.com/#customers)

The Problem

Efinity kept getting compliance questions from their customers **in the light of big data breaches**: did they have SOC2 certification?

Efinity knew they had to find a solution to a big problem to get certified and prove their excellent governance to their customers. Although they use clusters at the application level, their gateway and database nodes can’t be clustered. They run on CentOS, which requires around **two or three critical kernel updates per month**.

[Explore Extended Lifecycle Support for CentOS 6, 7, and 8.](https://tuxcare.com/extended-lifecycle-support/)

Top Obstacle

To get their SOC2 certification, Efinity would have to apply each update as soon as it was available, which would mean **downtime for their customers because of reboots**. They had no idea Linux kernels could be updated without rebooting, and they did not have the bandwidth to invest in more system admin resources. Still, they needed their servers to be compliant.

[Reboots slow systems down, but what about Live Patching?](https://tuxcare.com/does-live-patching-slow-systems-down/)

Result

Efinity reached out to TuxCare Live Pathing Services experts who helped them install KernelCare Enterprise. After a successful testing phase, they rolled this out to their production servers.

Two years on, Efinity remains fully compliant with SOC2. A considerable amount of risk and downtime was avoided by having KernelCare Enterprise installed during the emergence of the Zombieload and Spectre Linux vulnerabilities.

Click [here](https://meet.tuxcare.com/hubfs/Enterprise%20Sales%20Team%20Resources/tuxcare-customer-efinity-case-study.pdf?hsLang=en) for the full Case Study

### Request a call with TuxCare Sales Engineers to discuss how TuxCare Services can strengthen your security posture with automation. 7 Day Supported Trial is available for Enterprise clients.

© 2022 TuxCare, All Rights Reserved. TuxCare is a registered trademark of CloudLinux Software, Inc. and its subsidiaries in the United States and/or other countries

[![ClickCease](https://monitor.clickcease.com/stats/stats.aspx)](https://www.clickcease.com)