Autyn Achieves SOC 2 Type II Certification

A Milestone in Trust

We are proud to announce that Autyn has successfully completed its SOC 2 Type II audit, reaffirming our long-term commitment to the security, availability, and confidentiality of the mortgage data entrusted to our platform.

SOC 2 Type II is one of the most rigorous, independently verified security standards in the industry. Unlike Type I — which evaluates the design of controls at a single point in time — Type II validates that those controls have operated effectively over an extended observation period.

What SOC 2 Type II Means for Our Customers

For lenders, brokers, and mortgage operations teams, this certification means:

• Independently verified controls. Our security, change management, access, and monitoring practices have been audited by a third party against the AICPA Trust Services Criteria.
• Operational consistency. Controls were tested for sustained effectiveness — not just on paper, but in day-to-day operation.
• Enterprise-ready posture. Autyn meets the security expectations of banks, IMBs, and credit unions evaluating AI-powered loan processing.

Built on a Foundation of Security

SOC 2 Type II builds on the security program we've described publicly on our Security page:

• AWS-hosted infrastructure with isolated environments
• AES-256 encryption at rest and TLS 1.2+ in transit
• Auth0-based identity and access management
• Strict data segregation between customers
• Anonymization of borrower data used to improve AI models

Our Commitment Going Forward

Achieving SOC 2 Type II is not a finish line. It is a baseline we will continue to raise as we expand Autyn's AI loan processing capabilities. We will continue investing in independent audits, internal controls, and customer-facing transparency so that mortgage teams can adopt AI with confidence.

If your team is evaluating Autyn and would like a copy of our SOC 2 Type II report or a security review, please schedule a demo and our team will be happy to help.