SOC 2 Status
EQIQs is not yet SOC 2 certified. This page is maintained by EQIQs to give buyers, partners, and security reviewers an honest view of where we are in our SOC 2 readiness program and the controls already in production today.
Audit Roadmap
No audit dates are committed. We will update this page if an independent audit is commissioned.
Trust Services Criteria — controls in production today
Mapped to the AICPA Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy).
Security
- TLS 1.3 in transit, AES-256 at rest
- Row-Level Security on every public table
- Role-based access (Individual / Professional / Admin)
- MFA available; SSO/SAML for enterprise workspaces
Availability
- Managed Postgres with automated backups & PITR
- Edge function health alerts & error monitoring
- Public status page at /status
Confidentiality
- Least-privilege service role usage
- Secrets managed via vault; never in client code
- PII access via SECURITY DEFINER RPCs with redaction
Processing Integrity
- Versioned scoring engine (21 frameworks)
- Immutable quiz response audit log
- Admin write verification on privileged mutations
Privacy
- GDPR/CCPA data export & deletion in-app
- 30-day retention for derived/temporary records
- Standing DPA published at /legal/dpa
Documents available on request
• Data Processing Addendum (DPA)
• Subprocessor list
• Security questionnaire (CAIQ / SIG-Lite)
• Incident response & business continuity summary
Contact
Security & vulnerability reports: security@eqiqs.com
Privacy & DPA requests: privacy@eqiqs.com
Enterprise & procurement: BD@EQIQs.com
Last updated: June 30, 2026. EQIQs™ — 6017 Pine Ridge Rd #167, Naples, FL 34119.