SOC 2
Type I

SOC 2 is an AICPA framework evaluating a company's controls against the Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. A Type I report confirms these controls were properly designed and in place at a specific point in time.

Healthcare is the industry most affected by third-party vendor breaches — accounting for 41.2% of all such incidents tracked (Black Kite, Third-Party Breach Report). For health systems evaluating a technology vendor, a SOC 2 Type I report is independent proof — not a vendor's own claim — that formal security and governance controls exist before that vendor touches sensitive data.

Our SOC 2 Type I examination was conducted by ShieldByte Infosec Pvt. Ltd. (Cert-IN empanelled, Mumbai, India) with independent attestation by House of CPA Firm (New York, USA), covering our platform, infrastructure, and data-handling controls as of the report date. It's the first of two complementary reports — paired with our SOC 2 Type II report, which confirms these same controls operated effectively over time.