SOC 2
SOC 2 status letter and roadmap — Type I targeted end of 2026, Type II end of 2027. Status letter available under NDA.
We do not yet hold a SOC 2 report. Impact Suite is preparing for SOC 2 with our compliance and audit partner, Thoropass. Our security and privacy policies are documented and reviewed quarterly on the compliance platform, and control evidence is monitored continuously.
| Milestone | Target |
|---|---|
| SOC 2 Type I — controls suitably designed at a point in time | End of 2026 |
| SOC 2 Type II — controls operating effectively over an observation period | End of 2027 |
Our AWS infrastructure carries its own SOC 2 Type II, ISO 27001, and FedRAMP authorizations. That is inherited assurance for the hosting layer, not a substitute for our own attestation.
Our SOC 2 status letter is provided under NDA, and each report will be provided the same way once it is issued. Request access below and our compliance team will follow up.