Imagis has announced today that it has achieved SOC 2 Type II compliance in accordance with American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations also known as SSAE 18. We are proud to have received a clean SOC 2 Type 2 attestation report. Achieving this standard with an unqualified opinion serves as third-party industry validation that Imagis LLC provides enterprise-level security for customer’s data secured in the Imagis LLC System.

This rigorous, independent assessment of our internal security controls serves as validation of our dedication and adherence to the highest standards for security. This attestation report affirms that Imagis’ information security practices, policies, procedures, and operations meet the rigorous SOC 2 Trust Service Criteria for security.

This is an important milestone for us but is in no way an end to our commitment to our clients, the security of their data and the trust they put in us. Imagis views security as the foundation upon which our managed IT services are built and upon which trust with our customers is earned and maintained.

Imagis uses Drata’s automated platform to continuously monitor its internal security controls against the highest possible standards. With Drata, Imagis has real-time visibility across the organization to ensure the end-to-end security and compliance posture of our systems and information security program.

“This is a major achievement and milestone in our company’s journey and we could not have done it without the complete participation, support and engagement of our team and partners. Attaining the SOC 2 Type II compliance allows us to further enhance our footprint and positioning with regulated entities for whom security must not be compromised. Of course, we will not stop here. We commit to remaining vigilant, diligent and thoughtful in how we handle our own Info Sec program and related activities. Doing so ensures our client’s and their customers remain protected and have a peace of mind that Imagis will continue to be their trusted partner and provider for modern IT services.”
– Sam Shargo, CEO

Conducted by Prescient Assurance a leader in security and compliance attestation for B2B, SAAS companies worldwide. Prescient Assurance is a registered public accounting firm in the US and Canada and provides risk management and assurance services which includes but is not limited to SOC 2, PCI, ISO, NIST, GDPR, CCPA, HIPAA, and CSA STAR. For more information about Prescient Assurance, you may reach out them at

Developed by the AICPA, SOC 2 is an extensive auditing procedure that ensures that a company is handling customer data securely and in a manner that protects the organization as well as the privacy of its customers. SOC 2 is designed for service providers storing customer data in the cloud.

As more enterprises look to process sensitive and confidential business data with cloud-based services like Imagis, it’s critical that they do so in a way that ensures their data will remain safe. Our clients carry this responsibility on their shoulders every single day, and it’s important that the vendors they select to process their data in the cloud approach that responsibility in the same way.

We welcome all customers and prospects who are interested in discussing our commitment to security and reviewing our SOC compliance reports to contact us.


21972-312_SOC_NonCPA-jpgSOC 2-jpg