---
title: "Trust & security · SOC 2 Type II · Innorve"
description: "SOC 2 Type II examination completed. How Innorve protects your data, keeps people in charge of every decision, and leaves an audit trail examiners can read."
url: "https://innorve.ai/trust"
type: "page"
---

TRUST & SECURITY

# Built for work examiners read.

Regulated institutions trust us with their operations. Here is exactly how we protect your data, keep people in charge of decisions, and leave a record you can hand to an examiner.

INDEPENDENT ASSURANCE · CURRENT PUBLIC STATUS

## SOC 2 Type II. Examination completed.

Report issued May 18, 2026 by ConstellationGRC CPA P.C. with an unqualified opinion; review period January 25–April 25, 2026.

[Request the report](mailto:hello@innorve.ai?subject=SOC%202%20Type%20II%20report%20request)

SOC 2 Type II badge, monitored by Oneleet

SCOPE MATTERS

The report defines the examined entity, system, criteria, and period. This does not establish that every product, trial, partner, or client configuration is within that boundary. Confirm the relevant scope during diligence.

Last public-claims review: July 26, 2026. Current diligence materials are provided through the appropriate review process.

## Six rules we never bend.

### Your data stays in your workspace.

Every institution has its own workspace. No other institution can see it, and our engineers see only the clients they are assigned to.

### Member data is checked before anything reads it.

Uploads with social security numbers, account numbers or credentials are blocked with the reason, before any AI sees them.

### The assistant proposes. A person decides.

AI routes, summarises and drafts. It never approves work, makes a decision or confirms a result. Every decision carries a name.

### Nobody confirms their own work.

Delivery acceptance, outcome review and finance confirmation are three separate sign-offs by different people.

### Every action leaves a record.

Decisions, reasons, approvals and changes are kept in an audit trail you can export for examiners.

### Access goes through your process.

We use the access your team grants, in your environment, and we give it back when the work ends. You own the code, configuration and records.

[See these rules on an AI agent →](https://innorve.ai/ai-governance#fence)

TECHNOLOGY PARTNERS

## Our technology partners. Your approved stack.

- Microsoft
- UiPath
- Automation Anywhere
- Pega
- Anthropic

Model and platform choice follows your institution’s approved boundary. A named partner or platform on this website is not permission to send regulated, confidential, or cardholder data to that provider.

FOR YOUR DUE DILIGENCE

## Ask for anything on this list.

Your vendor management team gets these before the first project starts. Most arrive the same day.

SOC 2 Type II report

ON REQUEST · THROUGH DILIGENCE

Security questionnaire answers

ON REQUEST

Data handling and retention note

ON REQUEST

AI use and human review policy

ON REQUEST

Sample audit trail export

ON REQUEST

Insurance certificates

ON REQUEST

Subprocessor list

ON REQUEST

## Questions from your security team?

Send the questionnaire you already use. A named person at Innorve answers it, and your risk officer can join the scoping call.

[security@innorve.ai](mailto:security@innorve.ai) [Get a first read](https://innorve.ai/contact)