We aim to achieve SSAE 16 Type II certification for the Vault and associated core managed services within the first 24 months from opening.

About SSAE 16 Certification

The internationally recognized Statement on Auditing Standards (SAS) No.70, Service Organizations, was developed by the American Institute of Certified Public Accountants (AICPA). SSAE 16 provides a uniform reporting format that allows service organizations to disclose their control activities and processes to their customers and their customers' auditors. In a SSAE 16 examination, an independent accounting and auditing firm conducts an in-depth audit to ensure that a service provider offers adequate controls and safeguards for the critical task of hosting and/or processing data belonging to its customers. SSAE 16 Certification addresses all five components of internal control outlined in Section 404 of the Sarbanes-Oxley (SOX) Act of 2002, and demonstrates that the service provider has established effectively designed control objectives and control activities.

The service auditor's report, which includes the service auditor's opinion, is issued to the service organization at the conclusion of a SSAE 16 examination.