Select your country or region
Question we hear most often: "We need independent assurance that the cloud platform we're connecting to our network has the right controls in place. Self-attestations are not enough for our security review. What audit evidence can MAXHUB show us?"
Short answer: a SOC 2 Type I report by Ernst & Young Hua Ming LLP, covering MAXHUB OS and MAXHUB Pivot Plus, evaluating control design across four AICPA Trust Services Criteria as of 31 December 2025.
SOC 2 is the de facto independent assurance framework for cloud and software service providers. A SOC 2 Type I examination evaluates whether the controls in place at a service organisation are suitably designed to meet the relevant trust services criteria as of a specific date. The auditor — in our case Ernst & Young Hua Ming LLP, a member firm of one of the Big Four accounting networks — reviews and tests control design and issues an independent opinion.
Trust services criteria covered: Security (protection against unauthorised access), Availability (the system is available as committed), Confidentiality (confidential information is protected), and Privacy (personal information is handled in conformity with our commitments).
A Type I report evaluates control design at a point in time. A Type II report evaluates the operating effectiveness of controls over a period (typically 6–12 months). MAXHUB currently holds Type I; Type II is on our 2026/2027 roadmap. If your procurement framework requires Type II specifically, please contact us. We can discuss timeline and bridge documentation in the interim.
The SOC 2 report is restricted-use under the auditor's terms (intended for the service organisation, current and prospective user entities, their auditors, and regulators). Available to qualifying customers, prospects, and auditors under a non-disclosure agreement. Submit a request via the document library.
{$ text $}