Loading...
Loading...
SOC 2 Type II · Trust Service Criteria Assessment
Across all assessed frameworks and trust service criteria
| Framework | Score | Controls | Gaps | Status |
|---|---|---|---|---|
| SOC 2 Type II | 100% | 21/21 | 0 | Pass |
| NIST AI RMF | 93% | 17/19 | 2 | Pass |
| ISO 42001 | 97% | 10/12 | 2 | Pass |
| EU AI Act | 85% | 10/12 | 2 | Partial |
This is a self-assessment, not an independent audit. OmegaEngine has evaluated its OWN controls against the AICPA SOC 2 Type II Trust Service Criteria covering Security, Availability, Processing Integrity, Confidentiality, and Privacy. OmegaEngine is not SOC 2 certified and has not undergone an independent third-party audit; this report summarizes our self-assessed posture as of June 28, 2026.
Of the 21 controls assessed, 21 (100%) are fully implemented with auditable evidence. The platform demonstrates a mature security posture with defense-in-depth controls spanning the application, infrastructure, and organizational layers.
Entity demonstrates commitment to integrity and ethical values
Entity obtains and uses relevant quality information
Entity identifies and assesses risks to achieve objectives
Entity maintains a formal risk register with treatment plans
Entity selects and develops control activities to mitigate risks
Entity restricts logical access to systems
Entity authorizes, designs, develops, configures, tests, and implements changes
Entity detects and responds to security events
Entity manages security incidents to resolution
Entity manages risk from third-party service providers
Entity identifies and manages risks from business disruption
System meets availability objectives
System can recover from disruptions
Entity tests recovery plan procedures
System processing is complete, valid, accurate and authorized
Entity detects and corrects processing errors
Entity protects confidential information
Entity provides notice about its privacy practices
Entity designates a DPO and communicates privacy responsibilities
Entity maintains DPA with data processors per GDPR Art. 28
Entity disposes of data according to retention policies
This report was generated from live compliance data and reflects the current state of OmegaEngine's security controls.
For the full audit package including detailed evidence, proof chains, and penetration test results, contact security@omegaengine.ai.
© 2026 OmegaEngine. All rights reserved.
Report ID: OMG-CR-20260628-LBUA5Q • Generated: 2026-06-28T21:11:02.240Z