Centro de confianza de DESHA.AI
SOC 2 Type II
AICPA SOC 2 Type II
Estado: Working toward
Jurisdicción: International (AICPA)
Revisado: June 2026
De un vistazo
- Framework
- AICPA Trust Services Criteria
- Report type
- Type II (controls over time)
- Criteria
- Security (+ Availability, Confidentiality)
- Status
- Readiness / observation in progress
Trust Services Criteria
| Criterion | Focus |
|---|---|
| Security | Protection against unauthorised access (the common criteria) |
| Availability | System uptime, monitoring and resilience |
| Confidentiality | Protection of information designated confidential |
| Processing Integrity | Complete, accurate, timely processing (as applicable) |
| Privacy | Handling of personal information (as applicable) |
Where we are
Type I assesses control design at a point in time; Type II assesses operating effectiveness over a period (commonly 3–12 months). We are implementing and evidencing the underlying controls, access management, change management, monitoring, incident response and vendor management. The observation period required for a Type II opinion has not started.
Honest status
Until the report is issued we state “SOC 2 Type II, in progress” and do not represent ourselves as SOC 2 certified. Qualified reviewers can request our current control summary and the engagement timeline under NDA.
Documentación disponible bajo petición
- SOC 2 readiness / control summary
- Engagement timeline
- Sub-processor and vendor-management summary
Provided to qualified reviewers under a mutual NDA via contactus@desha.ai.