At Patients Know Best (PKB), the security and privacy of your data are at the core of everything we do. We understand that trust is earned, which is why we are committed to upholding the highest global standards of information security.

To demonstrate this commitment, PKB officially achieved SOC 2 Type II certification in February 2026.

Developed by the American Institute of Certified Public Accountants (AICPA), SOC 2 is an auditing procedure that ensures service providers securely manage data to protect the interests of their clients. It is considered the gold standard for data security and privacy.

Our certification is based on the five Trust Services Criteria:

• Security: Protecting information against unauthorised access.

• Availability: Ensuring systems are operational and available for use as agreed.

• Processing Integrity: Ensuring system processing is complete, valid, accurate, and authorised.

• Confidentiality: Protecting information designated as confidential.

• Privacy: Addressing the collection, use, retention, and disclosure of personal information.

Following a rigorous, independent audit, PKB has been verified as SOC 2 Type II compliant.

A Type II certification is more than a snapshot in time. Unlike a Type I audit, which only looks at a point-in-time design, our Type II report confirms the operational effectiveness of our security controls over an extended observation period. This comprehensive evaluation proves that our security practices are not only well-designed but are consistently followed and embedded in our culture.

After a comprehensive examination of our company’s infrastructure, software, personnel, data, and procedures, we received our final SOC 2 Type II report in February 2026. This achievement follows a significant investment of resources to ensure our systems meet and exceed the most stringent requirements in the industry.

Our SOC 2 Type II certification provides you with tangible, third-party assurance:

• Peace of Mind: You can be confident that your data is handled with the utmost care and protected by industry-leading security controls.

• Verified Trust: An independent, third-party auditor is validating that our security practices are robust and effective.

• Enhanced Reliability: The criteria for Availability ensure that our services will be there when you need them.

Open