SECURITY

SOC 2 Type II Report

Vrexo LLC maintains SOC 2 Type II certification, audited annually by an independent third-party assessor. The audit covers the Trust Services Criteria for security, availability, confidentiality, and privacy.

What the audit covers

Security

Access controls, encryption, vulnerability management, and incident response.

Availability

System uptime, failover procedures, and capacity monitoring.

Confidentiality

Data classification, tenant isolation, and controlled access to customer data.

Privacy

Data collection practices, consent management, and data subject rights procedures.

Requesting the full report

The complete SOC 2 Type II report is available to current customers and qualified prospects under a non-disclosure agreement. To request the report, email our security team with your name, company, and the context of your request.

We typically respond to report requests within one business day.

Request the report

Additional certifications

HIPAA

Vrexo supports HIPAA-compliant deployments for MSPs serving healthcare clients. A Business Associate Agreement (BAA) is available on request.

ISO 27001

Vrexo's information security management practices align with ISO 27001 standards. Formal certification is in progress.

Security contact

To report a security vulnerability or for compliance inquiries: security@vrexohq.com