At Patients Know Best (PKB), the security and privacy of your data are at the core of everything we do. We understand that trust is earned, which is why we are committed to upholding the highest standards of information security. To demonstrate this commitment, PKB are actively working towards our SOC 2 Type II certification.

What is SOC 2?

Developed by the American Institute of Certified Public Accountants (AICPA), SOC 2 is an auditing procedure that ensures service providers securely manage data to protect the interests of their clients. It is considered the gold standard for data security and privacy.

The certification is based on five Trust Services Criteria:

Security

Protecting information against unauthorised access.

Availability

Ensuring systems are operational and available for use as agreed.

Processing Integrity

Ensuring system processing is complete, valid, accurate, and authorised.

Confidentiality

Protecting information designated as confidential.

Privacy

Addressing the collection, use, retention, and disclosure of personal information.

Our SOC 2 Journey 

We are currently undergoing a rigorous, independent audit for SOC 2 Type II compliance.

What does this mean

A Type II audit doesn't just look at our security policies at a single point in time; it assesses the operational effectiveness of our security controls over an extended period. This comprehensive evaluation ensures our practices are not only well-designed but also consistently followed.

Timeline

Our audit observation period is underway, and we anticipate receiving our complete SOC 2 Type II report before the end of Q1 2026.

This process involves a comprehensive examination of our company's infrastructure, software, personnel, data, and procedures. We are investing significant resources to ensure our systems and processes meet and exceed these stringent requirements.

Why This Matters

Our pursuit of SOC 2 Type II certification provides you with tangible assurance:

• Peace of Mind: You can be confident that your data is handled with the utmost care and protected by industry-leading security controls.

• Verified Trust: An independent, third-party auditor is validating that our security practices are robust and effective.

• Enhanced Reliability: The criteria for Availability ensure that our services will be there when you need them.

Open