IPRally is SOC 2 Type II compliant
IPRally has completed its SOC 2 Type II examination. Advantage Partners, our independent auditor, tested our security controls in operation from March 4 to June 4, 2026, and issued an unqualified opinion: no exceptions noted on any control tested.
What Type II actually proves
A security questionnaire tests what a vendor says. A SOC 2 Type I report tests whether controls are properly designed at a single point in time. Type II goes further. It examines whether those controls actually operated, continuously, over the audit window. Access control, encryption, monitoring, incident response, vendor risk management, each tested against operating evidence from that window, not a description of intent.
To be candid about what that means: a report doesn't make software secure by itself. What it verifies is that the controls we describe are the controls we run. An independent examiner tested that claim and found them operating without exception throughout the audit window. That's the kind of evidence our customers can act on, not just take on faith.
Why it matters for patent data
The material our customers run through the engine includes invention disclosures, draft claims, and competitive analysis: some of the most sensitive data a company holds. That’s why the same discipline applies across everything we build. No training on customer data, zero data retention with our LLM providers, and now independent assurance that the controls behind those promises hold up in operation.
SOC 2 Type II sits alongside our ISO 27001:2022 certification: the same program, examined against two independent standards. Together, they cover both angles most enterprise security reviews look for: that a security program exists, and that it actually operates the way we say it does."This is a standing commitment, not a one-time achievement. Being re-examined every year is how we keep earning our customers' trust and stay a partner they can rely on," said Maneesh Chauhan, Head of Security & IT at IPRally Technologies.
Getting the report
We use Vanta for continuous control monitoring, and Advantage Partners conducted the examination. The full report is available to customers and prospective customers under NDA. Ask your account team, or request it through our Trust Center.
