System and Organization Controls (SOC) for Service Organizations: SOC 2 Type 2

The SOC 2 is intended to meet the needs of a broad range of users that need detailed information and assurance about the controls at a service organization relevant to security, availability, and processing integrity of the systems the service organization uses to process users’ data and the confidentiality and privacy of the information processed by these systems.

Sandata’s SOC 2 Type 2 reporting period is April 1 through March 31; and the report is generally available during the second quarter of each calendar year.  Additionally, Sandata will produce a “bridge letter” at the end of the third and fourth quarters of the calendar year.

Use of these reports is restricted to the management of the service organization, user entities, and user entities' auditors.  Further distribution of these reports is strictly forbidden without the expressed written consent of Sandata.

See attached documents for access to Sandata's latest SOC 2 Type 2 report and any applicable bridge letters.  Please note, SOC reports must be downloaded and opened in a PDF viewer (such as Adobe Acrobat Reader) to be able to acknowledge and accept the Confidentiality Agreement within the document.  This functionality (sometimes referred to as "click-through agreement") will not work properly when viewing the report within a web browser window.

• Gap Letter updated Q3 2024 SOC 2.docx.pdf200 KB
• Sandata Technologies 2024.03.31 SOC 2 Type 2 Report EV Final Clickwrap SECURED.pdf2 MB