Seattle, USA, July 2026 — Rivvun AI, an autonomous AI execution platform, today announced that it has achieved System and Organization Control (SOC) 2 Type 1 certification, validating the design and implementation of its security controls against the Trust Services Criteria for protecting customer data and platform operations.
SOC 2 Type 1 certification validates that Rivvun AI has established robust controls across information security, access management, risk management, infrastructure, and operational processes aligned with the AICPA Trust Services Criteria. The SOC 2 report reinforces Rivvun’s commitment to safeguarding customer security, privacy, availability, and confidentiality globally.
Rivvun AI is currently progressing toward SOC 2 Type 2 certification, with completion targeted for October 2026, further demonstrating the effectiveness of its controls over an extended audit period.
Our customers rely on Rivvun AI to autonomously identify and resolve spend leakage and margin erosion before they impact business performance. That responsibility comes with an unwavering commitment to security and trust. Achieving SOC 2 Type 1 demonstrates that the right controls are in place to safeguard customer data and operations. As we advance toward SOC 2 Type 2 certification, we remain focused on building an enterprise AI platform that organizations can trust to execute with confidence.
What SOC 2 covers
Security
Protections against unauthorized access to systems and data.
Availability
Systems are operational and accessible as committed.
Processing integrity
Data processing is complete, accurate, and authorized.
Confidentiality and privacy
Information designated as confidential is protected accordingly.
What this means for customers
A recognized, auditable answer for vendor security questionnaires, with a clear, dated path to Type 2 already underway.
Confirmation that access control, monitoring, and data-protection practices meet an independently assessed standard.
Assurance that the platform executing invoice, spend, and margin workflows is held to the same controls bar as core enterprise systems.