POINT ONE ZERO
Office Location
25 Palmer Square, Princeton, NJ 08542, US
Contact Info
Contact UsContact Us

Security is part of how we work. We build and run AI systems for clients who trust us with their data, so we have our controls independently audited and we are open about what that audit covers.

SOC 2 Type II

Point One Zero has completed a SOC 2 Type II examination. This is an independent audit that tests whether our security controls are designed well and operated effectively over a period of time, not just at a single point.

Report typeSOC 2 Type II
Report period1 August 2025 to 31 July 2026 (report issued 30 July 2026)
Independent auditorHouse of CPA Firm, a licensed CPA firm
Trust Services Criteria in scopeSecurity, Availability, Processing Integrity, Confidentiality and Privacy
OpinionUnqualified
ScopeOur strategy, design and engineering services, including product strategy, UX design, software engineering, AI and digital transformation, delivered from our US headquarters and our delivery hub in Coimbatore, India. Our cloud hosting providers and certain delivery partners are carved out of the report. We oversee them through contracts, service-level expectations and vendor management.

How we protect your data

These practices are covered by the controls tested in our audit.

  • Access control. Access to systems and client data is limited to people who need it for their work, and is reviewed regularly. Multi-factor authentication is required for administrative access.
  • Data protection. Hosted client deliverables use encryption in transit (TLS 1.2 or higher) and at rest where the underlying cloud platform supports it. Client personal data is treated as confidential and processed only on the client’s documented instructions.
  • Secure engineering. We follow defined processes for building, reviewing and releasing software and AI solutions, including change management.
  • Monitoring and incident response. We monitor our environment and maintain a documented process for responding to and reporting security incidents. A third-party provider performs vulnerability scanning, and we run penetration testing at least annually.
  • Vendor management. We assess the third-party providers we rely on, including cloud hosting and delivery partners, and oversee them through contractual arrangements, service-level expectations and vendor reviews.
  • People and policies. Our team follows documented security policies, completes security awareness training, and goes through background verification.
  • Business continuity. We maintain a business continuity plan and backup practices, using cloud-native backup and replication, so we can restore services after disruption.

Request our SOC 2 report

Our full SOC 2 Type II report is confidential, so we share it with current and prospective clients under a non-disclosure agreement.

To request a copy, email admin@pointonezero.com with the subject line “SOC 2 report request” and tell us your name, company and role. We will respond within two business days.

Security questions and reporting a concern

If you have a security questionnaire, a due-diligence request or a question about how we handle your data, contact us at admin@pointonezero.com.

If you believe you have found a security issue affecting Point One Zero, please email admin@pointonezero.com with the details. We take every report seriously and will respond promptly.

About this page

SOC 2 is an attestation report issued by an independent CPA firm under AICPA standards. It is not a certification. This page summarises our security practices and does not replace the full report or any agreement we have with you. Information is current as of the date above and may change as our controls and audit periods change.

Point One Zero Inc. • Email: admin@pointonezero.com • Phone: (678) 901-4328