01
Define the system boundary
Document the AirCEO service, production systems, data flows, and relevant third-party services that may fall within scope.
SOC 2 readiness
AirCEO is assessing the controls, system boundaries, and evidence needed to prepare for an independent SOC 2 examination.
The work ahead
The assessment is designed to establish what is in scope, where evidence exists, and what needs to improve before an independent examination.
01
Document the AirCEO service, production systems, data flows, and relevant third-party services that may fall within scope.
02
Review the policies and operating practices that support the service, then record gaps and the work needed to address them.
03
Identify what evidence is needed for each control and how it will be collected and retained over time.
04
Use the readiness findings to establish when the business is ready for an independent SOC 2 examination. Scope and timing have not been announced.
A precise status
AirCEO has not completed an independent SOC 2 examination and does not yet have a SOC 2 report. SOC 2 is an independent examination and report, not a self-issued certification.