Trust shouldn't be something you take our word for. Today we're sharing that Grantd Equity has officially achieved SOC 2 Type 2 certification, independently audited by Prescient Assurance LLC — and what that actually means for the data you keep with us. ‍

‍

What SOC 2 Type 2 actually means ‍

SOC 2 is an independent audit standard from the AICPA that evaluates how a company safeguards customer data across security, availability, processing integrity, confidentiality, and privacy. There are two flavors, and the difference is the whole point. ‍

Type 1 is a snapshot: an auditor confirms the right controls exist on a single day. Type 2 is the harder, more meaningful one: an auditor observes those controls operating over a sustained window — for us, November 2025 through February 2026 — and verifies they held up the entire time.

Type 1 says the controls exist. Type 2 says they worked — every day, for months.

We went straight for Type 2. It's the standard that asks not "could you protect this data?" but "did you, consistently, under real conditions?"

‍

Why it matters for your equity data‍

Equity is some of the most sensitive information a company holds: ownership stakes, valuations, personal taxpayer details, and numbers that change people's lives. As an AI-powered platform for managing equity grants, stock options, and RSUs, we hold that data on behalf of founders, finance teams, and every employee with a stake.

This certification is our formal, third-party-verified commitment to protecting it — a reflection of how we build and operate Grantd every day, now confirmed by an outside auditor rather than asserted by us.

‍

What's protected

Encryption

AES-256 at rest, TLS 1.2+ in transit

Data availability

Multi-AZ infrastructure, continuous backups, defined RTO/RPO targets

Access control & MFA

MFA enforced, RBAC, least-privilege, quarterly access reviews

Monitoring & alerting

AWS GuardDuty + CloudTrail + SIEM + 24×7 Managed Detection & Response (MDR)

Vulnerability mgmt

Regular scanning and patching

Vetted personnel

Background checks + annual training

Zero exceptions. Zero incidents.

The audit closed with no exceptions, and we recorded zero security incidents across the entire audit period.

‍

What happens next

SOC 2 Type 2 isn't a one-time trophy — it's a standard we now hold ourselves to continuously. Our controls stay under ongoing monitoring, and we'll re-audit annually to keep the certification current as Grantd grows.

‍

Equity, made legible — and secure.

Equity management for issuers, advisors, and employees — backed by SOC 2 Type 2 certification and built for trust.

Book a demo →
Similar content