SOC 2 Compliant

SOC 2 Type II, with no exceptions noted

Scanning America, Inc. has completed a SOC 2 Type II examination by an independent CPA firm under the AICPA’s SSAE 18 attestation standard. The auditors tested our controls over a period of time, not on a single day, and reported no exceptions, the best result an examination can give.

A SOC 2 report is the recognized way for a service organization to show that its policies and procedures are both properly designed and operating effectively. For a client, it is independent, third-party verification of how we handle your records, not just our own assurance.

What the examination covers

The controls tested address the structure, stability, compliance and sustainability of:

• Physical and environmental security
• Information security
• Data communications
• Managerial and staff controls
• Access controls

“Scanning America is committed to addressing and managing compliance risk, and preserving the security and privacy of information and information resources,” says Tim Hunsinger, Scanning America’s CEO. “We have developed a set of best practices for internal controls ensuring the confidentiality, integrity and availability of information and applications, and we dedicate part of our annual budget to reviewing, updating and auditing our information security policies, processes, standards and procedures. AICPA-sanctioned audits are an investment in a secure operating environment that benefits our customers, our productivity and our accountability.”

About SOC 2 and SSAE 18

System and Organization Controls (SOC) reports are defined by the American Institute of Certified Public Accountants (AICPA). A SOC 2 report examines a service organization’s controls relevant to the security, availability, processing integrity, confidentiality and privacy of the systems it uses to process clients’ data. A Type II report covers a period of time and tests whether the controls operated effectively throughout it; a Type I describes the controls at a single point in time.

SSAE 18, the Statement on Standards for Attestation Engagements No. 18, is the AICPA standard under which these examinations are performed. It replaced SSAE 16 in 2017, which had in turn replaced the older SAS 70 reports.

About Scanning America, Inc.

Scanning America is a full-service document imaging company providing high-quality conversion services with an emphasis on document accuracy, integrity, quality and security. Our services help clients streamline business processes through proven conversion techniques and the delivery of electronic documents into Enterprise Content Management (ECM) software.

We serve public and private entities in human resources, accounts payable, finance, pension and benefits, government, healthcare, education, energy, insurance, mortgage and title, transportation and manufacturing. With a scanning capacity of over one million pages per week, we have scanned over one billion images. For more information, email [email protected] or call 800-732-7226.