Proxi.id Completes SOC 2 Type 2 Examination Across All Five Trust Services Criteria

An independent audit confirms that Proxi.id’s verification service meets AICPA standards for protecting the sensitive data of the people it verifies.

Proxi.id has completed its SOC 2® Type 2 examination, covering all five Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy. The audit evaluated how our controls operated over six months, from March 2026 to August 2026. To prepare for the examination, we partnered with Truvo Cyber, who helped us validate our controls and guided our team through the audit process.

The SOC 2 framework was created by the American Institute of Certified Public Accountants (AICPA) to assess how service providers protect their customers’ data. SOC 2 focuses on how a company secures and handles the data entrusted to it. A Type 2 report goes a step further than Type 1: instead of checking our controls at a single point in time, auditors confirmed that they worked consistently over the full audit period. Many companies limit their audit to the Security criterion. We chose to include all five, including Privacy, because protecting end-user data is central to what we do.

“Brands choose Proxi.id to verify users for their group-based programs due to our commitment to end-user privacy,” said Julian Eckhardt, CTO of Proxi.id. “Completing SOC 2 Type 2 shows that we put those commitments into practice every day. Security and privacy are built into how we design our service, and this audit is one part of that ongoing work.”

What this means for our customers

For current and prospective customers, this report provides independent confirmation that information Proxi.id receives from users during verification is handled securely. And it makes vendor reviews simpler. Your security and procurement teams can review our report directly, rather than relying on questionnaires alone.

What this means for institutions and users

Students, teachers, military personnel, veterans, government and non-profit employees, and the institutions they’re affiliated with can verify through Proxi.id knowing their information is collected only for verification and handled under independently audited controls.

Part of a broader commitment

SOC 2 Type 2 builds on Proxi.id’s compliance with GDPR and CCPA, our support for institutions’ FERPA obligations, and our policies for data minimization and retention. Companies can request a copy of our SOC 2 Type 2 report through our security page.