SOC 2 Type IIon-track
Trust services criteria for the federation control plane.
last assessed 2026-06-30
| Control | Status | Evidence |
|---|---|---|
| CC7.2Incident response | passing |
|
| CC8.1Change management | passing |
|
| CC6.1Logical access | warn |
|
| CC6.6Break-glass approval | passing |
|
Admin · Governance · Compliance
Compliance, evidenced.
Framework posture backed by control-level evidence, plus the federated identity trust roster. Export the full pack for an auditor without rebuilding it by hand.
Frameworks32 on track
Controls passing7of 10 total
Controls at attention2warn or failing
Trusted IdPs5of 6 federated
Evidence pack
by framework · exportableISO/IEC 27001on-track
Information security management system controls.
last assessed 2026-05-15
| Control | Status | Evidence |
|---|---|---|
| A.9Access control | passing |
|
| A.12.1Operational change | passing |
|
| A.18.1Sovereign data residency | manual |
|
HIPAA (Briarcliff scope)at-risk
PHI handling for the Briarcliff Health custodial engagement.
last assessed 2026-04-20
| Control | Status | Evidence |
|---|---|---|
| 164.312(a)Access control (PHI) | passing |
|
| 164.308(a)Workforce security | warn |
|
| 164.502(e)Business associate | passing |
|
Federated IdP posture
cert-level trust · next rotation CHG-5102| Provider | Protocol | Trust | Direction | Signing cert | Expires |
|---|---|---|---|---|---|
| NaaS Labs IdPacct-naas | oidc | trusted | bidirectional | sha256:412d91ef… | 2026-08-3029d |
| Northwind IdPacct-northwind | saml | trusted | inbound | sha256:3c552dd3… | 2026-08-3029d |
| Beacon Digital IdPacct-beacon | oidc | trusted | inbound | sha256:1332229a… | 2026-08-3029d |
| Meridian IdPacct-meridian | oidc | trusted | bidirectional | sha256:1e473fc5… | 2026-08-3029d |
| Harbor Grain Networks | saml | probationary | inbound | sha256:aa63da13… | 2026-09-15 |
| Aurora Transit IdPacct-aurora | oidc | trusted | bidirectional | sha256:e608c4d6… | 2026-11-01 |