SOC 2 Type II Compliance & Audit Policy

CapEngage operates an enterprise security control environment evaluated against the American Institute of Certified Public Accountants (AICPA) SOC 2 Type II Trust Services Criteria:

1. Security: Firewalls, intrusion detection, MFA, encryption, vulnerability management, and employee background checks. 2. Availability: Redundant cloud hosting across multiple availability zones, 99.9% uptime commitments, and disaster recovery failover testing. 3. Confidentiality: Customer Data isolation, role-based access control (RBAC), zero third-party AI training guarantees, and non-disclosure obligations.

Our security controls and operational practices undergo continuous automated monitoring and annual evaluation by independent, accredited licensed CPA audit firms.

The SOC 2 Type II evaluation covers a 12-month audit window, verifying that CapEngage controls are effectively designed and operating smoothly.

Qualified Enterprise customers and prospective enterprise clients evaluating CapEngage may request a copy of our latest SOC 2 Type II Executive Summary or full Audit Report:

• Request Procedure: Submit a request to security@capengage.com or sales@capengage.com. • Non-Disclosure Agreement (NDA): Access to the complete SOC 2 Type II audit report requires a signed Non-Disclosure Agreement (NDA) or an active Enterprise subscription contract.