When you hand your IT environment to a managed service provider, you’re handing over the keys to your business: your user accounts, your network, your backups, and often your most sensitive data. You deserve more than a promise that it’s being protected. You deserve proof.

That’s why we’re proud to announce that August eTech has completed a SOC 2 Type II examination, conducted by an independent CPA firm under the standards of the American Institute of Certified Public Accountants (AICPA).

What Is SOC 2 Type II?

SOC 2 is a security framework developed by the AICPA to evaluate how service organizations protect the data they manage on behalf of their clients. An independent auditor reviews the organization’s controls against a set of standards known as the Trust Services Criteria.

There are two types of SOC 2 reports, and the difference matters:

• Type I looks at whether controls are designed properly at a single point in time. It’s a snapshot.
• Type II tests whether those controls actually operate effectively over an extended period, typically several months. It’s the full picture.

In other words, a Type II report doesn’t just confirm that we have the right policies on paper. It confirms that our team follows them, day in and day out, and that an outside auditor has tested the evidence to prove it.

What Our Report Covers

Our SOC 2 Type II examination covers three of the AICPA Trust Services Criteria:

• Security: Systems and data are protected against unauthorized access, disclosure, and damage. This includes access management, multifactor authentication, threat detection and response, change management, and vendor oversight.
• Availability: The systems we manage are available for operation and use as committed. This includes monitoring, backup and recovery, incident response, and business continuity planning.
• Confidentiality: Information designated as confidential is protected throughout its life cycle, from collection and storage to secure disposal.

Why This Matters to Our Clients

For 25 years, August eTech has supported organizations across New Jersey, the tri-state area, and beyond, with a particular focus on regulated industries such as life sciences, pharmaceuticals, healthcare, and biotech. Our clients already operate under demanding frameworks, including HIPAA, FDA 21 CFR Part 11, and GxP. They need IT partners who hold themselves to the same standard.

Here’s what SOC 2 Type II compliance means for you:

Your data stays protected. Our security controls have been independently evaluated, not just self-reported.

Your audits get easier. When your own auditors, regulators, or customers ask how your IT provider safeguards your data, you can point to our SOC 2 report instead of filling out lengthy vendor questionnaires from scratch.

Your vendor risk goes down. Many organizations now require SOC 2 reports from any third party with access to sensitive systems. Our report helps you meet that requirement and strengthens your own compliance posture.

Our controls are tested over time. A Type II report reflects consistent, sustained practices, the kind of discipline that matters when an incident happens at 2:00 a.m. on a holiday weekend.

Security Is How We Operate

SOC 2 Type II isn’t a one-time achievement for us. It reflects how our team works every day. Our managed security services are monitored by our in-house August eTech Security Operations Center (SOC), backed by a layered security stack that includes managed detection and response, endpoint protection, secure web filtering, and next-generation firewalls. As a Microsoft Security Solutions Provider and Cisco Meraki-certified partner, and a 2026 ChannelPro Top 20 MSP, we’ve built our services around the belief that strong security and great service go hand in hand.

Maintaining SOC 2 compliance is an ongoing commitment. We’ll continue to be examined regularly, so our controls keep evolving alongside the threats our clients face.

Request Our SOC 2 Report

Current and prospective clients can request a copy of our SOC 2 Type II report. Because the report contains detailed information about our internal controls, it’s shared under a nondisclosure agreement.

Ready to see it, or want to learn how August eTech can strengthen your security and compliance posture? Contact us today to request our SOC 2 report or schedule a conversation with our team.

August eTech: Independently verified security for the data you trust us with.