SOC 2 Type II certified

Security your team can put in front of an auditor.

Nuclear quality records carry the same expectations as the work they describe. The platform is built for that: an isolated instance per customer, encryption at rest and in transit, and a full history on every record and every export. The SOC 2 Type II report and the rest of the security package are available on request, under NDA.

What is covered

Independently audited, across the whole platform.

Forged Operations achieved SOC 2 Type II certification on 7 January 2026, following an independent audit of the security, availability and confidentiality controls protecting customer data. Type II covers whether those controls operated effectively over an extended audit period, not just whether they exist on paper.

The certification covers the platform in full: supplier qualification records, NCR and corrective action data, document control, training records and audit evidence.

Sovereign cloud

Built for export control environments. Our cloud, your cloud, or on-site and air-gapped.

Isolated instance per customer

Your records are not co-mingled with another organisation's in a shared tenant.

Encryption at rest and in transit

End-to-end, with role-based access controls governing who can reach which records.

Immutable, verified records

Fingerprint, timestamp and full history on every record, and on every export.

Every AI output traces back to the source records it was drawn from. Read the SOC 2 Type II announcement, or the privacy policy for how customer data is handled.

Request the security package

We reply within one business day with the NDA and the documents you asked for.

Request received

We'll send the NDA and the documents you asked for within one business day. If it is urgent, email [email protected].