SOC 2 Type I — independently audited by Ernst & Young

Question we hear most often: "We need independent assurance that the cloud platform we're connecting to our network has the right controls in place. Self-attestations are not enough for our security review. What audit evidence can MAXHUB show us?"

Short answer: a SOC 2 Type I report by Ernst & Young Hua Ming LLP, covering MAXHUB OS and MAXHUB Pivot Plus, evaluating control design across four AICPA Trust Services Criteria as of 31 December 2025.

What SOC 2 Type I tells you

SOC 2 is the de facto independent assurance framework for cloud and software service providers. A SOC 2 Type I examination evaluates whether the controls in place at a service organisation are suitably designed to meet the relevant trust services criteria as of a specific date. The auditor — in our case Ernst & Young Hua Ming LLP, a member firm of one of the Big Four accounting networks — reviews and tests control design and issues an independent opinion.

Trust services criteria covered: Security (protection against unauthorised access), Availability (the system is available as committed), Confidentiality (confidential information is protected), and Privacy (personal information is handled in conformity with our commitments).

Scope of our report

• MAXHUB OS — the operating system on MAXHUB interactive flat panels, including whiteboard, wireless screen sharing, video calling, cloud disk folder, file transfer, and split-screen functions.
• MAXHUB Pivot Plus — the web-based device-management platform for MAXHUB interactive panels, covering status monitoring, panel grouping, scheduling, and remote configuration.

Cloud infrastructure within scope: Microsoft Azure (cloud computing), Google Cloud (CDN), Amazon Web Services (object storage). The report also identifies complementary controls assumed to operate at these subservice organisations.

Type I vs Type II

A Type I report evaluates control design at a point in time. A Type II report evaluates the operating effectiveness of controls over a period (typically 6–12 months). MAXHUB currently holds Type I; Type II is on our 2026/2027 roadmap. If your procurement framework requires Type II specifically, please contact us. We can discuss timeline and bridge documentation in the interim.

How to obtain the report

The SOC 2 report is restricted-use under the auditor's terms (intended for the service organisation, current and prospective user entities, their auditors, and regulators). Available to qualifying customers, prospects, and auditors under a non-disclosure agreement. Submit a request via the document library.