Digital Align Inc. announced on August 14, 2024, that it had achieved SOC 2 Type 2 certification after an independent audit by an external auditing firm. The company said the announcement covered security, availability, processing integrity, confidentiality and privacy for its platform serving credit unions and community banks. The release does not name the auditor or provide the attestation report, audit period, report date or detailed system scope, so customers should treat it as a dated company milestone rather than proof of a current report.
What Digital Align announced
Digital Align provided the announcement to PR Newswire on August 14, 2024. It said an external auditing firm independently audited the company and that Digital Align had achieved SOC 2 Type 2 certification. The release also says Digital Align previously held SOC 2 Type 1 certification.
Digital Align describes itself as a business-process transformation and automation-intelligence provider for financial institutions. Its stated platform functions include streamlining operations, integrating systems and optimizing workflows. Those are company descriptions, not independently verified performance results.
The announcement lists all five SOC 2 Trust Services Criteria:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- Security
- Availability
- Processing integrity
- Confidentiality
- Privacy
The release does not establish that every criterion applied to every Digital Align system or service. The applicable boundaries should be confirmed in the company’s attestation report.
What the Type 1-to-Type 2 reference tells you
The only comparison in the announcement is historical: Digital Align says it held Type 1 before announcing Type 2. The release does not publish control counts, testing results, audit duration, incident rates or other metrics, and it does not compare Digital Align with another provider.
Rank #2
For a buyer, the important question is not simply whether a vendor uses the “Type 2” label. A current report should identify the services and systems examined, the period covered, the criteria in scope, the auditor’s opinion and any exceptions. None of those details is included in this announcement.
What remains unverified
| Due-diligence item | What the announcement establishes | What it does not establish |
|---|---|---|
| Independent audit | Digital Align says an external auditing firm performed an independent audit. | The firm’s name, qualifications and report are not provided. |
| Report timing | The public announcement is dated August 14, 2024. | The audit period and report date are not stated. |
| Scope | Five Trust Services Criteria are listed. | The systems, locations, services and customer data covered are not described. |
| Exceptions | None are discussed in the release. | Whether the report contains exceptions or complementary-user-entity controls is unknown. |
| Current status | A Type 2 milestone was announced in 2024. | The source does not verify a current or renewed attestation. |
How financial institutions should use the announcement
- Request the current report under confidentiality. Ask Digital Align for the latest SOC 2 Type 2 attestation, not only the press release.
- Match the scope to the proposed service. Check that the report covers the platform, environments and data flows your credit union or community bank will use.
- Check dates and continuity. Review the report period and report date, then ask what coverage exists between the end of that period and your contract start.
- Read exceptions and customer responsibilities. Determine whether any control exceptions affect your risk assessment and which controls your institution must operate itself.
- Confirm ongoing assurance. Ask whether a newer report, bridge letter or remediation update is available, because the 2024 announcement alone cannot prove present status.
Statements attributed to customers and advisers
The release includes supportive comments from Michael Carlos, CTO at SkyOne FCU; Elkan Wollenberg, CIO at Red Canoe Credit Union; Raj Bandaru, CIO at Kinecta FCU; and Alexis Hoang, VP of Technology at Excite Credit Union. Their comments describe trust, data-security commitment and the milestone’s importance, but they are quotations published in Digital Align’s announcement, not independent interviews or audit findings.
Steven Ward, President and Founder of ITech Governance Consulting, said his firm supported Digital Align in IT governance and security needs. Athul Kakathkar, Digital Align’s India Director of IT and Security, said the company intends to continue enhancing data security and user experience. These statements express the speakers’ views and do not add measurable security results to the announcement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Bottom line for prospective customers
Digital Align reported a significant assurance milestone on August 14, 2024: an external audit leading to what the company calls SOC 2 Type 2 certification, following its earlier Type 1 certification. The announcement is useful as a starting point, but procurement decisions should rely on a current attestation report and a review of its period, scope, criteria, exceptions and customer responsibilities. Read the original release at PR Newswire.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
