No results found for .
Here are a few popular articles to keep exploring.
Independently Verified: AssureSoft Completes a SOC 2® Type 2 Examination
When you bring a software engineering partner into your codebase, your environments, and your product roadmap, you are trusting them with some of your most sensitive assets. That is why independent assurance of a partner's security practices matters so much.
AssureSoft has recently completed a SOC 2 Type 2 examination, and an independent Certified Public Accountant (CPA) auditor has issued a favorable opinion on the description of the system and on the design and operating effectiveness of the controls examined. The review covered September 1, 2025, to August 31, 2026, against the Security, Availability, and Confidentiality Trust Services Criteria.
What the examination covered
SOC 2 (System and Organization Controls 2) is a reporting framework developed by the American Institute of Certified Public Accountants (AICPA). An independent CPA tests a service organization's controls against the Trust Services Criteria. Ours covered three:
- Security: how systems and information are protected against unauthorized access.
- Availability: whether systems are available for operation and use as committed.
- Confidentiality: how information designated as confidential is protected.
The examination applies to the controls supporting AssureSoft's software development services, within the scope and period defined in the report.
Type 2: evidence over time, not a snapshot
A SOC 2 Type 1 report looks at how controls are designed at a single point in time. A Type 2 report goes further: the auditor also tests whether those controls operated effectively across a full period, in our case, twelve months.
Why this matters when you choose a software development partner
You can review the evidence yourself. The report details the system, the controls, and the auditor's procedures, tests, and results. Your security team can read what was tested and what was found.
Vendor assessments can move faster. Security questionnaires and third-party risk reviews are a standard part of onboarding an engineering partner. An independent report can answer many of those questions directly, so your team spends less time on back-and-forth and more time getting projects started.
Distributed delivery calls for evidence. Our 500+ engineers work from hubs across Latin America, all in U.S. time zones. When your developers work remotely and across locations, it is reasonable to ask how access and data are managed. For the controls in scope, the SOC 2 Type 2 report is that independent answer.
It is a signal of how we operate. Controls that hold up over twelve months of independent testing reflect daily habits across the company, not a one-time effort. That consistency is what we want clients to see.
How to request the report
The full report contains sensitive operational information, so we do not publish it openly. It is available on request to authorized customers and business partners, subject to identity and business relationship verification and a non-disclosure agreement.
To request our SOC 2 Type 2 report, please write to security@assuresoft.com
Existing clients can also reach out to their AssureSoft account manager.
Want to know more about how we protect client data? Visit our Trust Center.
Tags
AssureSoft is a leading nearshore software partner, engineering high-quality solutions by combining deep technical expertise with the strategic advantages of Latin America.
Founded in 2006, we build enduring client relationships by investing in our people’s growth and forming high-performing teams that directly support our clients’ success.