ekai has completed its SOC 2 Type II audit with zero exceptions across every control tested. The audit was conducted by independent CPA firm Johanson Group, and it confirms that ekai's security controls didn't just exist on paper but operated effectively over time.
Key facts
- Company
- ekai, the semantic layer that powers auditable AI agents
- Milestone
- SOC 2 Type II audit completed
- Result
- No exceptions across every control tested
- Auditor
- Johanson Group, an independent CPA firm
- For customers
- Independent proof that ekai protects your data consistently, not just on the day of the audit
Why did ekai pursue SOC 2 Type II?
ekai pursued SOC 2 Type II because AI infrastructure owes the people who rely on it calm, verifiable trust — not blind faith. We didn't do it because compliance is trendy.
When you hand a platform your data and let it shape decisions, you deserve more than a promise. You deserve proof, checked by someone who isn't us.
People Also Ask: Is SOC 2 a legal requirement?
No. SOC 2 is a voluntary attestation framework, but enterprise buyers routinely require it before sharing sensitive data with a vendor.
Why does auditability matter for enterprise AI?
Every data platform today is being asked to do more with AI. Far fewer are being asked the harder questions:
- 01Can you trace why the model did what it did?
- 02Who approved that model deployment?
- 03What changed, when, and under whose authority?
These aren't edge cases. They're the questions that decide whether an enterprise can actually put AI into production — and stand behind the results.
Key takeaway: Production AI is decided by traceability, not capability.
How does ekai make AI outputs auditable?
ekai makes AI outputs auditable through its semantic layer. That layer doesn't just power AI agents — it gives every output a lineage: the context it drew from, the rules it followed, and the trail back to its source.
Accuracy you can audit, not just accuracy you're asked to trust.
SOC 2 Type II extends that same principle from our product to our company.
What does this mean for ekai customers?
For customers, a clean SOC 2 Type II report means ekai's commitment to transparency covers the company, not just the product. Right now, AI can feel like a black box. We don't think the right response is to move faster and explain less. It's to build systems — and companies — that can show their work.
Key takeaway: Trust in AI should be verified by someone other than the vendor.
Frequently Asked Questions
1. Is ekai SOC 2 compliant?
Yes. ekai has completed a SOC 2 Type II audit with no exceptions across every control tested.
2. What is SOC 2 Type II?
SOC 2 is a framework from the AICPA for evaluating how service organizations protect customer data. A Type II report tests whether security controls operated effectively over a period of time, not just whether they were designed correctly at a single point.
3. What is the difference between SOC 2 Type I and Type II?
A Type I report evaluates whether controls are designed correctly at one point in time. A Type II report goes further and tests whether those controls actually worked consistently over an extended audit period.
4. Who audited ekai?
ekai’s SOC 2 Type II audit was conducted by Johanson Group, an independent CPA firm.
5. Did ekai’s audit have any exceptions?
No. The audit found zero exceptions across every control tested.
6. How can I get a copy of ekai’s SOC 2 Type II report?
Contact the ekai team to request a copy of the report.
Final Thoughts
Thank you to our team for the care they put into this, and to Johanson Group for their rigor throughout the audit.
This is one milestone in an ongoing commitment, not a finish line. If you'd like a copy of our SOC 2 Type II report or want to talk through how ekai handles your data, reach out to our team.
References
- American Institute of Certified Public Accountants (AICPA). SOC for Service Organizations. aicpa-cima.com.
- Johanson Group, independent CPA firm. johansonllp.com.
- ekai. What is AI Semantic Modeling? ekai.ai/blog/what-is-ai-semantic-modeling.
- ekai Security. ekai.ai/security.
