SOC 2 Type II and ISO 27001 audit status

Solwees is mid-audit for two formal security certifications: SOC 2 Type II (continuous controls audit covering security, availability, confidentiality and processing integrity) and ISO 27001 (information security management system certification). Both audits are managed through Vanta, which provides continuous evidence collection and the third-party auditor relationship.

Audit window: SOC 2 Type II requires a minimum of 3 months of evidence collection (we're past the minimum, completion expected in Q3 2026). ISO 27001 certification is on a parallel track with the same auditor. Both target European-market enterprise customers and partners doing procurement due diligence.

What's available today for procurement reviews: a Vanta-issued bridge letter that states the audit is in progress and confirms the controls already implemented. Request a bridge letter by emailing security@solwees.ai with the requesting company's name, your role, and the deadline. Standard turnaround is 1-2 business days.

What's available without an NDA: our public Trust Center at trust.solwees.ai lists every implemented control, the subprocessor list (see subprocessor-list), our data-flow diagram, and our incident-response runbook. Under NDA we share the SOC 2 system description, penetration test reports and the ISO 27001 statement of applicability. Most enterprise procurement reviews close based on the Trust Center alone.