Achieving and maintaining SOC 2 compliance is fundamental to our commitment to data protection, operational integrity, and trust. Our approach is structured around the five Trust Service Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy.
To meet SOC 2 standards, we have developed and implemented comprehensive policies and controls governing every aspect of our operations. These include Access Control, Data Protection, Encryption Management, Change Management, and Information Security policies, forming the foundation of our compliance program.
Our structured compliance program incorporates regular audits, assessments, and continuous updates to our security controls, ensuring our framework remains robust and aligned with industry best practices.
A key component of our SOC 2 compliance is fostering a culture of security awareness among our employees through initiatives such as Onboarding Security Training, an Ongoing Security Awareness Program, and an Annual Compliance Refresher to reinforce adherence to our security policies.
We meticulously document all policies, procedures, incident responses, and compliance activities, ensuring transparency and accountability in our operations.
Service delivery
Agent IQ’s SaaS platform is hosted on AWS or GCP, with dedicated in-region instances offered to each financial institution, alleviating concerns about data integrity and exposure. Single tenancy ensures that service delivery remains unaffected by other institutions’ service loads, resulting in no downtime or maintenance costs.
If you would like to review our latest SOC 2 Type II report to understand more about our controls, processes, and how we protect customer data, please reach out. We are more than happy to provide it to partners or other stakeholders upon request.
