XPLUS – SOC 2 Type I Audit Summary
Independent assurance of security controls
At XPLUS, the security of our clients’ data and systems is a foundational part of how we operate. This page summarizes the outcome of our independent SOC 2 Type I audit and explains how to request access to the full report.
Audit Results
XPLUS has successfully completed an independent SOC 2 Type I audit conducted by an independent audit firm in accordance with the attestation standards established by the American Institute of Certified Public Accountants (AICPA).
As a result of the audit, the independent auditor issued an Unqualified Opinion, confirming that, as of 8 January 2026:
- the description of the audited system was fairly presented;
- the controls were suitably designed to meet the applicable Trust Services Criteria;
- the controls were implemented as designed.
SOC 2 is one of the world’s most widely recognized independent assurance standards used to assess the control environment of IT service providers and cloud service providers.
The successful completion of the SOC 2 Type I audit provides independent assurance that XPLUS has implemented an appropriately designed control framework supporting the security of its services and the protection of information.
The full SOC 2 Type I Report contains detailed information regarding the audit scope, the audited environment, the control framework and the independent auditor’s opinion. Due to its confidential nature, the Report is made available only to existing and prospective customers who require it for the purpose of evaluating XPLUS as a supplier.
Request Full SOC 2 Report
Please provide basic identification details and accept the applicable confidentiality terms. Our team will get back to you shortly.
XPLUS reserves the right to decline a request, including (without limitation) requests submitted by competitors or by entities for which the report is not intended for the purpose of vendor due diligence. Your data will be used solely to verify your request and will not be shared with third parties.