SOC is a framework developed by the American Institute of Certified Public Accountants (AICPA) for the purpose of providing regular, independent attestation of the controls that a company has implemented to mitigate information-related risk. As a foundational standard of cybersecurity, SOC 2^® examines controls in place that protect and secure its system or services.

For the audit, which was conducted by A-LIGN, an industry-leading technology-enabled security and compliance partner, Upward Health described the policies, procedures, and systems established to protect information across five categories called Trust Services Criteria.

“A SOC 2 audit is a statement about an organization’s commitment to protecting its information,” said Stephanie Oyler-Rankin, SOC Practice Lead at A-LIGN. “As a trusted third-party assessment firm, A-LIGN independently evaluates client data processes and procedures, governance on internal controls and security posture. Upward Health’s SOC 2 report validates its commitment to data security and protection, as well as compliance with critical standards to mitigate cybersecurity threats.”

The final report confirmed that Upward Health’s controls related to information security practices, policies, procedures, and operations met AICPA’s standards.