Financial services firms don’t take a vendor’s word on security, and they shouldn’t. Before a financial institution trusts us with information about its people and customers, its risk and procurement teams need independent evidence that our controls work. Our SOC 2 Type 2 report gives them that evidence.
What SOC 2 Type 2 confirms
SOC 2 is an attestation framework from the American Institute of Certified Public Accountants (AICPA). An independent auditor examines a service provider’s controls against the AICPA’s Trust Services Criteria and reports on what it finds.
There are two types of report. A Type 1 report looks at whether controls are designed properly at a single point in time. A Type 2 report goes further: the auditor tests whether those controls actually operated effectively across an observation period. It’s the version most financial services vendor-risk teams ask for, because it shows how security works day to day, not just on the day of the audit.
Our report covers the period from 1 November 2025 to 31 January 2026.
What was examined
The audit covered three of the Trust Services Criteria:
- Security: protecting systems and data against unauthorised access, including how access is granted and reviewed, how systems are monitored, and how incidents are handled.
- Availability: the controls that keep the platform running and recoverable.
- Confidentiality: how we identify and protect the information our clients classify as confidential, and how we dispose of it.
Two standards, two kinds of assurance
SOC 2 Type 2 sits alongside our ISO/IEC 27001:2022 certification. ISO 27001 confirms that the information security management system we have built is sound. SOC 2 Type 2 confirms that the controls within it operated as intended over time. Together they answer the first two questions a vendor-risk team asks: is the system right, and does it work?
What it means for your security review
For banks, credit unions and insurers evaluating SeeEverything, the report is designed to make the security review faster. Many standard vendor questionnaire items can be answered from the report directly, so your teams can spend their time on the questions specific to your environment.
It also reflects how we run the platform. All of our AI features run on Amazon Bedrock, and client data is never used to train AI models.
How to get the report
Our SOC 2 Type 2 report and ISO/IEC 27001 certificate are available to current and prospective clients. You can request access through our Trust Centre at trust.seeeverything.com.