SOC 2
Audit in progress — target H2 2026
Gateco is undergoing SOC 2 Type II certification. The audit covers the Security trust service criterion as the baseline, with Availability and Confidentiality criteria included given our role as a retrieval security layer.
Audit scope
Current controls evidence
Enterprise customers can request the following artifacts at enterprise@gateco.ai:
- →Security architecture overview and threat model
- →Encryption and key management documentation (KMS envelope encryption)
- →Access control and authentication documentation
- →Incident response and business continuity plans
- →Penetration test scope and recent findings summary
- →Vendor and subprocessor list with DPA status
- →CI test suite coverage for security-critical paths
Key controls already in place
Frequently asked questions
- When will Gateco achieve SOC 2 Type II certification?
- We are currently undergoing the SOC 2 Type II audit process, targeting H2 2026. Enterprise customers can request current security artifacts and evidence at enterprise@gateco.ai.
- What trust service criteria does the Gateco SOC 2 audit cover?
- The audit covers the Security trust service criterion as the baseline, with Availability and Confidentiality criteria included given Gateco's role as a retrieval security layer handling sensitive organizational data.
- Can I get Gateco's current security controls documentation before SOC 2 is complete?
- Yes. Enterprise customers can request the current security controls documentation, architecture overview, and evidence artifacts directly at enterprise@gateco.ai.
Request security artifacts
Enterprise customers can access current security documentation, evidence artifacts, and the audit timeline directly from our team.