OnlineApplication Achieves SOC 2 Type II Compliance

At OnlineApplication, security and trust are core to how we support brokers, lenders, and financial institutions. We’re pleased to announce that we have successfully completed our SOC 2 Type II audit, demonstrating that our security controls are not only well-designed but operating effectively over time.

SOC 2 Type II is a rigorous, independently verified standard that evaluates how an organisation safeguards customer data across key Trust Services Criteria, including security, availability, and confidentiality. Achieving this milestone reflects the maturity of our internal controls and our long-term commitment to operating at the highest compliance standards expected in financial services.

We first achieved SOC 2 Type I compliance in 2024, demonstrating that our security controls were appropriately designed at that point in time. Completing SOC 2 Type II now confirms that these controls have operated effectively and consistently over an extended period.

The audit was conducted by Prescient Assurance, who performed an in-depth review of our systems, policies, and procedures. Their opinion attestation provides independent assurance that OnlineApplication meets the stringent requirements of the SOC 2 framework.

To support our compliance efforts, we use Vanta as our compliance automation platform, enabling continuous monitoring, efficient evidence collection, and an embedded approach to security and compliance across the business.

What this means for our customers

For our customers and partners, this milestone provides confidence that:

  • We have maintained SOC 2 compliance since achieving Type I
  • Our security controls are tested, monitored, and proven over time
  • OnlineApplication meets the expectations of regulated financial services environments

SOC 2 Type II compliance is part of our ongoing commitment to maintaining robust, scalable, and transparent security practices as our platform continues to evolve.