COMPLIANCE
SOC 2 Type II.
Last reviewed · May 03, 2026Audit cycle · annual surveillanceDocument · /compliance/soc2
Overview
BroadNet holds a SOC 2 Type II report, covering the Trust Services Criteria for Security, Availability, and Confidentiality. The report is shared with enterprise evaluators under NDA.
§01
Why this matters
SOC 2 is the standard procurement evidence for North American enterprise buyers. We maintain our SOC 2 Type II report so that US-based customers can satisfy their own compliance frameworks.
§02
Definitions
Audit and compliance terminology referenced on this page is defined below. Where definitions diverge from a specific framework, the framework standard prevails for that attestation.
Quick reference
- Scope statement
- The systems, processes, and locations covered by the attestation. Out-of-scope items are explicitly excluded.
- Surveillance audit
- Annual reassessment between full certification cycles to confirm controls remain effective.
- Type I vs Type II
- Type I attests to control design at a point in time. Type II attests to operating effectiveness over a period.
- Bridge letter
- Auditor confirmation that no material changes have occurred between the end of the audit period and the letter date.
Questions?
Questions on this attestation, scope, or certificate verification? Our legal and security teams co-own compliance correspondence.
legal@broadnet.meBroadNet Technologies Sarl · Dubai, UAE · Operating since 2003
Related documents