SOC 2 Type II Audit Status
Tracking our progress toward SOC 2 Type II certification
Audit Readiness
Audit Timeline
Audit Planning & Scoping
May 2025Defined audit scope, selected Trust Services Criteria, and engaged auditor.
Control Implementation
June 2025Implemented all 82 security controls across infrastructure, organizational, product, internal, and data privacy domains.
Evidence Collection
June - July 2025Collecting and documenting evidence for all controls via Vanta continuous monitoring.
Audit Period Begins
July 1, 2025SOC 2 Type II audit period starts. All controls will be tested over 3-month observation period.
Fieldwork & Testing
July - September 2025Auditor performs control testing, reviews evidence, and conducts interviews.
Audit Period Ends
September 30, 2025End of observation period. Final evidence submitted for auditor review.
Report Issuance
October 2025Auditor issues SOC 2 Type II report with opinion on control effectiveness.
Auditor
- Firm
- Prescient Assurance
- Contact
- audit@prescientassurance.com
- Audit Type
- SOC 2 Type II
Trust Services Criteria
Scope
All systems, processes, and controls related to the Mesta payment platform, including infrastructure, application security, data protection, and organizational controls.
Live Monitoring
Real-time compliance monitoring via Vanta platform
Open Vanta Dashboard