SOC 2and Trust Services.
ProofGuard designs its security program around the AICPA Trust Services Criteria used in SOC 2 examinations: security, availability, processing integrity, confidentiality and privacy.
LAST UPDATED SEPTEMBER 23, 2026
Security
Access control with least privilege and multi factor authentication, encryption in transit and at rest, logging and monitoring, vulnerability management, and incident response. See Data Security.
Availability
For hosted deployments: backups with tested restoration, monitoring, capacity planning and documented recovery procedures.
Processing integrity
AI actions logged with inputs, model version and sources; deterministic rule engines where accuracy requirements call for them; and attorney review before any output is relied on, sent or filed.
Confidentiality
Single tenant environments, role and matter level permissions, ethical walls, confidentiality agreements for staff and vendors, and return or deletion of client data at the end of an engagement as agreed.
Privacy
Personal information handled as described in our Privacy Policy and, for client data, under each client’s agreement and instructions.
Reports and documentation
Clients and prospective clients can request our current SOC 2 status, security documentation and completed security questionnaires through our contact page. Documentation is shared under a nondisclosure agreement.