Security, Compliance & Trust

At ARPIA Technologies, we take security, availability, and confidentiality seriously. Our infrastructure, processes, and team follow industry best practices to safeguard customer data and ensure business continuity.

We maintain a structured compliance and governance program designed to protect customer data, support responsible AI usage, and ensure operational resilience.

📜 Compliance & Certifications

SOC 2® Type I

Trust Services Criteria: Security, Availability, Confidentiality

ARPIA has successfully completed a SOC 2 Type I audit performed by an independent third-party auditor.

This report confirms that ARPIA's internal controls and security practices are properly designed to meet the AICPA Trust Services Criteria.

Our SOC 2 program covers:

Security controls
Infrastructure availability
Confidentiality of customer data
Internal operational governance

✅ Recently Completed Audit Fieldwork — Reports Expected Q2–Q3 2026

ARPIA has successfully completed the audit fieldwork for both SOC 2 Type II and ISO/IEC 42001 certifications. Independent third-party auditors have finished their on-site assessments, and we are currently awaiting the issuance of the formal reports and certificates.

SOC 2® Type II — Fieldwork Completed | Draft Report Expected June 2026

ARPIA has completed the fieldwork for its SOC 2 Type II audit, which evaluates the operational effectiveness of our controls over an extended observation period.

As of May 2026, 100% of the requested evidence has been accepted by our independent auditor, and the engagement has moved into the internal review phase. The draft report is expected in June 2026, with the final report to follow after management review.

This audit demonstrates that ARPIA consistently maintains strong security, availability, and confidentiality practices across its infrastructure and operations.

ISO/IEC 42001 — Stage 2 Audit Completed | Recommended for Certification

ARPIA has completed the Stage 2 certification audit for its Artificial Intelligence Management System (AIMS), aligned with the ISO/IEC 42001 standard.

Following the audit, ARPIA was formally recommended for certification by the independent third-party auditor in May 2026. The official certificate is expected to be issued by the certification body in the following weeks, pending final certification committee review.

The ISO/IEC 42001 framework establishes structured governance for the responsible development, deployment, and operation of AI systems, including:

AI risk management and monitoring
Transparency and accountability mechanisms
Lifecycle oversight for AI systems
Responsible AI use and human oversight controls

🔐 Security Practices

ARPIA follows industry-standard security practices to protect customer data and ensure system integrity.

Our security program includes:

Strong authentication and access controls
Encryption for sensitive data in transit and at rest
Infrastructure monitoring and logging
Secure credential and secret management
Vendor and third-party risk management
Continuous improvement of operational security practices

Security controls are regularly reviewed and improved as part of our compliance and risk management programs.

🤖 Responsible AI Governance

As an AI infrastructure platform, ARPIA prioritizes responsible and transparent AI usage.

Our AI governance practices include:

AI system inventory and risk classification
Human oversight for AI-assisted decisions
Continuous monitoring of AI system performance
Lifecycle governance from development to deprecation
Vendor and model provenance review
Governance aligned with the ISO/IEC 42001 AI Management System

These practices help ensure that AI technologies deployed through ARPIA remain accountable, transparent, and aligned with ethical standards.

📥 Request Compliance Documentation

If you are a client, partner, or prospective customer and require compliance documentation for procurement or vendor risk assessments, we are happy to assist.

Email: [email protected]

Please include:

Your name and organization
Reason for request (e.g., procurement review, vendor security assessment)
Any specific requirements or deadlines

Typical response time: 1–2 business days