October 19, 2026
Independent report from Prescient Assurance, LLC covers the design of MyWave's controls against the AICPA Trust Services Criteria, giving SAP partners and their customers a faster path through vendor security review.
NEW YORK — MyWave.ai, the governed agentic AI platform for the enterprise, today announced it has completed a System and Organization Controls (SOC) 2 Type 1 examination. The report, issued by independent service auditor Prescient Assurance, LLC, covers the MyWave.ai system, delivered through the MyWave Innovation Hub, and the suitability of the design of its controls against the AICPA Trust Services Criteria for Security, as of October 9, 2026
The examination reflects where enterprise AI buying has moved. MyWave's agent does real work inside SAP ECC, SAP S/4HANA, SAP Business One and other systems of record, like clearing invoice exceptions, updating orders and closing processes end to end.
Software that writes to the system of record gets the scrutiny of the system of record, and security teams in manufacturing, life sciences and financial services now want independent evidence before an AI vendor gets near production.
“Governance has always been the point of MyWave. The Supervisor checks every response against the policy our customers write, the same way every time,” said Geraldine McBride, Co-founder and CEO, MyWave.ai. “Our partners put their name on every deployment, and their customers' risk teams want proof that the company behind the platform holds itself to the same standard. This report gives them that, and it takes one more hurdle out of the path between a good conversation and a signed deal.”
What the Report Covers
A SOC 2 Type 1 report is prepared by an independent CPA under AICPA attestation standards. It evaluates two things:
The system description. MyWave's description of the MyWave.ai system, delivered through the MyWave Innovation Hub, reviewed by the auditor.
The design of controls. Whether those controls are suitably designed to meet MyWave's commitments under the Trust Services Criteria for Security, as of 9 October 2026.
MyWave has begun its SOC 2 Type 2 observation period, which tests how those controls operate over time.
“Our customers' risk teams approve the policy before the agent ever runs. Now they can also review independent assurance on the controls around the platform itself,” said Amy Johnson, Co-founder and Chief Product Officer, MyWave.ai. “The Supervisor governs what the agent does. This report speaks to how we run the company that builds it.”
Built for the Partner Channel
MyWave goes to market through global systems integrators and an established SAP Business One VAR network. For GSIs, the report drops straight into the vendor risk packs their enterprise clients already require. For SAP Business One partners, it means an answer is ready when a customer's auditor, insurer or IT lead asks how the AI vendor manages security.
"SOC 2 Type I gives our customers and partners independent confirmation that the security controls designed for the MyWave Innovation Hub are suitable,” said Deepak Veerasamy, Chief Information Security Officer, MyWave.ai. “Customers run our agents inside their own systems, so trust has to be earned with evidence. Type I is the design proof. Type II, now under way, will show those controls operating over time."
Availability
The SOC 2 Type 1 report is available to customers and partners under NDA. To access, fill out the request form.
Global Solutions Integrators can contact info@mywave.ai to find out more. SAP Business One partners can reach the B1 team directly at b1@mywave.ai.
