# CertifyOS Achieves Third Consecutive SOC-2 Compliance

5/29/25

**_Milestone underscores company's enduring commitment to data security and compliance_**

CertifyOS, a provider of data intelligence, today announced it has achieved [Service Organisation Control (SOC) 2 Type 2 compliance](https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2) for the second consecutive year, building on its [initial SOC-2 Type 1 certification](/content/resources/blog/soc-2-certification-data-security/index.html) received in 2023. The achievement demonstrates CertifyOS's ongoing dedication to maintaining the highest standards of [security](/content/resources/blog/healthcare-network-security/index.html), privacy, and [compliance](/content/resources/blog/healthcare-compliance-importance/index.html) in an increasingly digital healthcare environment.

"Our three-year track record of [SOC-2 compliance](/content/resources/blog/soc2-type2-certification/index.html) reflects our unwavering commitment to security excellence," said [Shannon Kern](https://theorg.com/org/certify/org-chart/shannon-kern), Senior Director of Quality, Compliance and Security at CertifyOS. "These certifications validate that our comprehensive security framework doesn't just exist on paper but operates effectively every day across our entire organization. For our healthcare clients, this means peace of mind knowing their sensitive data is protected by proven, independently-verified safeguards that meet the industry's highest standards."

The SOC-2 Type 2 audit examination, administered by the [American Institute of Certified Public Accountants (AICPA)](https://www.aicpa-cima.com/home), evaluates an organization's information systems and security controls over a rigorous 12-month period. CertifyOS underwent assessment across 131 controls spanning nine categories of the [Trust Services Criteria (TSC)](https://www.aicpa-cima.com/resources/download/2017-trust-services-criteria-with-revised-points-of-focus-2022) for Security, including control environment, communication and information, risk assessment, monitoring controls, logical and physical access controls, system operations, change management, and risk mitigation.

As healthcare organizations continue their digital transformation journey, security certifications have become essential indicators of reliability and trustworthiness.

"We see these certifications as stepping stones, not finish lines," added Kern. "We're building the most robust compliance framework and security posture possible, with privacy as our ultimate guide. Our goal has always been to exceed industry standards and make it easy for our healthcare clients to trust us with their sensitive information."

CertifyOS's security program aligns with industry-leading frameworks like [NIST](https://www.nist.gov/cyberframework), and includes continuous monitoring, encryption, secure system architecture, antivirus and malware protection, annual penetration testing, business continuity testing, and other organization-wide compliance protocols (e.g., security awareness training, vendor risk assessment).

CertifyOS takes a rigorous and comprehensive approach to security and compliance in support of our healthcare partners. On June 25th, we're hosting a webinar to discuss how we're helping our clients stay ahead of changes to the NCQA credentialing changes. You can reach out to your client relationship manager or email [sales@certifyos.com](mailto:sales@certifyos.com) to request an invite.