SOC 2 Type II Report

SOC 2 Type II is an independent audit under the AICPA Trust Services Criteria. It examines the design and operating effectiveness of our controls over an observation period — not just a point in time. Our report covers:

1. Security — access controls, encryption, monitoring, incident response.
2. Availability — uptime, disaster recovery, capacity management.
3. Confidentiality — handling of sensitive data provided by customers, including PHI when a BAA is in place.

1. Sign in and go to Settings → Legal Documents.
2. Find the SOC 2 Type II Report card in the Available section and click Request Report. A side panel slides in.
3. The subject is pre-filled. Add optional notes that will help us respond faster — for example, recipient names/emails, the intended audience (InfoSec, procurement, board), or a deadline.
4. Tick I confirm this request and click Submit Request.

Your request opens a support ticket routed to our compliance team. You can track it under Support → My Tickets. The team will verify the request, coordinate any pre-requisite paperwork if applicable, and share the report with you.

Most requests are handled within one business day. Any replies from the compliance team appear on the ticket thread and go to the email on your account.

1. IRS Form W-9 — direct download for vendor setup and 1099 records.
2. Subprocessor List — third-party services we use to deliver interpreting.
3. HIPAA BAA — self-serve request and e-signature for healthcare customers.