Independent assurance. Ongoing security monitoring.
Nexoraa has completed an independent SOC 2 Type II examination of the Nexoraa AI Platform against the Trust Services Criteria relevant to Security. Explore our security practices and request the documentation your team needs to evaluate Nexoraa.
SOC 2 Type II examination completed
- Examination period15 July–15 September 2026
- ScopeTrust Services Criteria relevant to Security
- Independent auditorAccorp Partners CPA LLC
View live Trust CenterSOC 2 Type II examination completed
- System examined
- Nexoraa AI Platform
- Independent auditor
- Accorp Partners CPA LLC
- Scope
- Trust Services Criteria relevant to Security
- Examination period
- 15 July–15 September 2026
- Report issued
- 7 October 2026
- Report access
- Available to qualified customers and prospective customers following approval and an NDA
The examination assessed the design and operating effectiveness of the controls described in the report over the examination period. The full report sets out the auditor’s opinion, scope, testing, and applicable limitations.
Securely shared via
Ongoing monitoring with Vanta
We use Vanta to support ongoing security control monitoring and evidence collection across connected systems. Our Trust Center provides visibility into selected controls and access to supporting documentation.
Automated monitoring supports our security program. Independent assurance is provided through the SOC 2 examination covering the period stated above.
Connected systems
Cloud infrastructure
Identity and access
Code and change
People and devices
Ongoing monitoring
Control monitoring and evidence collection across connected systems.
Trust Center
Visibility into selected controls and supporting documentation
SOC 2 examination
Independent assurance for the stated period
Security documentation
SOC 2 Type II report
Penetration-test summary
Compliance alignment
Listed separately from our SOC 2 Type II examination, which covers the Trust Services Criteria relevant to Security only and does not establish the status of these frameworks.
ISO 27001
Information security controls aligned to ISO 27001. Not certified.
GDPR
Data processing agreement and standard contractual clauses available.
DPDP (India)
Data handling practices aligned to India’s DPDP Act.
HIPAA
Business associate agreement available for healthcare engagements.
Operational practices
- Background checks
- For production access
- Access reviews
- Quarterly at minimum
- Change control
- Formal, for every release
- Incident response
- 24/7 on-call for severity-1
- Continuity
- Documented BCP, tested DR
Data handling
- Residency
- Configurable per deployment
- Isolation
- Tenant-level
- Retention
- Configurable per data class
- Deletion
- Right-to-be-forgotten supported
- Backups
- Encrypted and region-bound
Vulnerability disclosure
- Report to
- support@nexoraa.ai
- Acknowledgement
- Within 2 business days
- Triage
- Within 5 business days
- Safe harbour
- For good-faith research