Compliance

Independent assurance is central to how we earn and keep our customers' trust. Below is the current status of our compliance program. Customers and prospective customers can request our audit reports under NDA.

SOC 2 Type 1
Attested

Status label: Completed October 2026
(controls assessed as of October 9, 2026)

MyWave has completed a SOC 2 Type 1 examination performed by Prescient Assurance, LLC, an independent service auditor. The report covers the MyWave.ai system, delivered through the MyWave Innovation Hub, and assesses whether its controls were suitably designed to meet MyWave's commitments under the AICPA Trust Services Criteria for Security, as of October 9, 2026.

A SOC 2 Type 1 report evaluates the design of controls at a specific point in time. We have now begun our SOC 2 Type 2 observation period, which tests how those controls operate over a period of time.

What's covered

The MyWave.ai system, delivered through the MyWave Innovation Hub. The report includes MyWave's description of the system, reviewed by the auditor, and the auditor's assessment of control design against the Security criteria.

Get the report

The full SOC 2 Type 1 report is available to customers, prospective customers and partners under NDA. To access, fill out the request form.

SOC 2 Type 2
Next Step

Status label: Next step

A SOC 2 Type 2 examination is our next step. It will test how the controls assessed in our Type 1 examination operate over a period of time.

In the meantime, our SOC 2 Type 1 report and a bridge letter are available under NDA. To access, fill out the request form.

ISO/IEC 27001
In progress

Status label: Implementation underway

We are implementing an Information Security Management System (ISMS) aligned with ISO/IEC 27001:2022 and are working towards certification. Our next milestone is a Stage 1 audit.

Our ISO 27001 programme builds on the controls already assessed in our SOC 2 examination, extending them into a formal, continually improving management system.

FAQs

  • MyWave has completed a SOC 2 Type 1 examination, performed by Prescient Assurance, LLC, against the Trust Services Criteria for Security as of 9 October 2026. A SOC 2 Type 2 examination is our next step. The Type 1 report is available under NDA. To access, fill out the request form.

  • The MyWave.ai system, delivered through the MyWave Innovation Hub. It reviews our system description and whether our controls are suitably designed to meet the Security criteria.

  • Not yet. We are implementing an ISO 27001-aligned ISMS, and our next milestone is a Stage 1 audit.

  • Yes. Our completed security questionnaire answers most standard questions and is available under NDA.

  • In the United Kingdom for the MyWave Innovation Hub; the MyWave runtime operates in your environment. See Privacy and data protection.

  • Yes, independent testers assess our application annually. A letter from the tester confirming the scope, date and closure of the test is available under NDA. We do not share findings. To access, fill out the request form.

  • Global systems integrators: info@mywave.ai. SAP Business One partners: b1@mywave.ai.

  • Email trust@mywave.ai