Inth has completed its SOC 2 Type 2 audit.
An independent CPA firm tested our controls over three months and signed the report on 26 October 2026. If you're a customer or in diligence with us, you can request it under NDA today.
What the report covers
A SOC 2 report is an independent auditor's opinion on a company's controls, measured against the AICPA's trust services criteria.
A Type 2 report doesn't look at a single day. It tests whether those controls operated over a period of time.
Ours covers:
- Criteria: Security, Availability and Confidentiality
- Audit period: 1 July to 30 September 2026
- Auditor: Securance Pro Assurance PLLC, a licensed CPA firm
- Report signed: 26 October 2026
The auditor issued an unqualified opinion. In audit terms, that's a clean report.
Why it matters for compliance as code
Inth is built on compliance as code. Banner and consent changes go through code review like the rest of your stack, so each one is reviewed, approved and traceable like any other commit.
The thing deciding what fires on your site should be held to the same bar as the rest of your stack. Until now, we could only say that about ourselves. Now there's a signed audit report behind it.
SOC 2 looks at how we run Inth: the controls behind security, availability and confidentiality. An audit is a baseline, not the whole of security work.
How to get the report
The report is restricted use, so we share it under a mutual NDA.
Customers and prospects can request it from the Trust center, where you can also see our subprocessors. If you're already in diligence with us, just ask your contact at Inth.
Compliance as code, with a signed audit report to show for it.