SOC 1 Type II
Readiness programControl mapping, evidence collection, and operating discipline are being built toward formal assessment.
Ironclad POS|Trust Center
Security at Ironclad
Security and compliance for serious dispensary software.
Protecting customer data should be built into the product, the infrastructure, and the way the company operates. Ironclad is building its trust program around the controls and evidence buyers expect from regulated retail software.
Program status
SOC 1 Type IIReadiness program
SOC 2 Type IIReadiness program
HIPAASafeguards planning
Public claims should track completed controls and real evidence. Formal reports and certifications are not yet published.
Standards coverage
Program directionSOC 2 Type II
Readiness programSecurity, availability, access, logging, and change-management controls are being designed for audit review.
HIPAA
Safeguards planningAdministrative and technical safeguards will be implemented where healthcare-adjacent workflows require them.
PCI scope
Minimize by designPayment architecture should keep sensitive cardholder scope narrow and provider-bound wherever possible.
Resources
What can be reviewedSecurity overview
Architecture, environment boundaries, access model, monitoring approach, and how trust controls are being built into the platform.
Compliance roadmap
The control matrix and evidence plan guiding SOC 1, SOC 2, HIPAA, and PCI-conscious implementation work.
Policy package
Access control, change management, incident response, backup and recovery, vendor review, and retention policies.
Subprocessors
Initial previewAmazon Web Services
Cloud infrastructureUSA
Application hosting, storage, and core infrastructure services.
Cloudflare
Edge securityGlobal / USA
Traffic filtering, delivery, and perimeter protection.
Datadog
MonitoringUSA
Infrastructure and application observability.