Applied Systems has been proactive in working with the Cloud Security Alliance whose mission is to promote best practice in the provision of security assurance within Cloud Computing. The CSA Security, Trust & Assurance Registry (CSA STAR) is a free, publicly accessible registry documenting security controls published by various cloud service providers, thereby helping users assess the security of Cloud services they use or are considering contracting with. 

The International Organization for Standardization (ISO) is a self-governing, non-governmental entity and the largest creator of voluntary international standards globally. The International Electrotechnical Commission (IEC) is the foremost organization for creating and publishing international standards for electrical, electronic, and related technologies. These worldwide standards offer a structure for policies and procedures encompassing all legal, physical, and technical controls involved in an organization's information risk management processes and continual improvement of its security program. 

Applied Epic, Ivans, Applied Mobile, Applied Marketing Automation, Applied CSR24, and Indio are certified as ISO/IEC 27001:2013 compliant. As a formal specification, the 27001 standard sets out requirements for implementing, monitoring, maintaining, and continually improving the ISMS. It also recommends a series of best practices, including documentation requirements, responsibility divisions, availability, access control, security, auditing, and corrective and preventive measures. 

If you need Applied ISO certification, you have two ways to request it. First, you can ask your account manager for help. Alternatively, you can do it yourself online. Just go to Applied's community site, look for the 'Product Information' section, and then find the 'Due Diligence Documentation'. Here's the direct link: https://community.appliedsystems.com/s/product-information 

The ISO/IEC 42001:2023 certification, the international standard for Artificial Intelligence Management Systems (AIMS), demonstrates that Applied has established and maintains a structured governance framework for the responsible development, deployment, and oversight of AI technologies, including risk management, impact assessments, human oversight, continual improvement, and compliance with applicable regulatory and ethical requirements.  

The certification covers Applied Systems' AI operations and AI-enabled offerings, including AI development, infrastructure, governance, and supporting technology teams for Applied Book Builder, Applied Recon, Epic Email Summarization, EZLynx Ask EVA, and Planck.  

A SOC 1 (System and Organization Controls 1) is an audit report that evaluates the internal controls of a service organization that may impact its clients' financial reporting, although these controls can vary depending on the nature of the service organization. It's used because it provides assurance to the clients of the service organization that the company has robust and reliable controls in place. 

Applied Systems conducts a SOC 1 Type 2 audit annually within the Trust Services Criteria of security, availability, and confidentiality. The Applied Epic product has its own SOC 1 report. 

If you need Applied SOC 1 Type 2 report, you have two ways to request it. First, you can ask your account manager for help. Alternatively, you can do it yourself online. Just go to Applied's community site, look for the 'Product Information' section, and then find the 'Due Diligence Documentation'. Here's the direct link: https://community.appliedsystems.com/s/product-information 

Applied Systems maintains independent SOC 1 and SOC 2 assurance programs to provide customers with third-party validation of the design and operating effectiveness of relevant controls. SOC examinations are performed by an independent Certified Public Accounting firm in accordance with applicable AICPA standards.
 
Applied’s SOC 2 Type 2 program evaluates controls against the AICPA Trust Services Criteria relevant to Security, Availability, and Confidentiality. Applied conducts SOC 2 Type 2 examinations on a semiannual basis across multiple reporting scopes covering its portfolio of in-scope products and services. These include Broker Management Systems, IVANS, Applied Extended Solutions, and Applied Extended Solutions UK & Ireland. Applied Data Lake has also completed a SOC 2 Type 1 examination, and Cytora completed a SOC 2 Type 1 examination as part of its progression into Applied’s SOC 2 Type 2 program.

The SOC (System and Organization Controls) standards are owned and managed by the American Institute of Certified Public Accountants (AICPA). The AICPA is the world's largest association representing the accounting profession. It sets ethical standards for the profession and U.S. auditing standards for private companies, nonprofit organizations, federal, state and local governments. 

A SOC 3 report is a general use report of the SOC 2 reports which covers how a company safeguards customer data and how well those controls are operating. Companies that use cloud service providers use SOC 2 reports to assess and address the risks associated with third party technology services. These reports are issued by independent third party auditors covering the principles of Security, Availability, and Confidentiality. 
 
Applied Cloud is SOC 3 compliant. Read the report.