At Tactus AI, we’re building robotic technology for clinical and research laboratories, where the security and integrity of data, specimens, and critical workflows are essential. Earning our customers’ trust in these environments means more than building a robot that performs reliably on the bench. It means demonstrating that the systems and data supporting our technology are managed responsibly and securely.
That’s why we’re pleased to share that Tactus AI has completed its SOC 2 Type II examination and received its SOC 2 Type II report from an independent CPA firm, covering the Security, Availability, and Confidentiality Trust Services Criteria over the period from April 1, 2026 through July 1, 2026.
What SOC 2 Type II actually means
SOC 2 is an AICPA-developed framework for examining controls relevant to the security, availability, processing integrity, confidentiality, and privacy of the systems organizations use to provide services.
Unlike a Type I report, which evaluates the design and implementation of controls as of a specified date, a Type II report also evaluates whether those controls operated effectively over a defined period. In practice, that means an independent auditor examined evidence of how our controls operated over time, not just the policies and procedures we have on paper.
Why this matters to our customers
For laboratory and healthcare organizations evaluating a new technology partner, questions about data security, access control, and operational discipline are often as important as questions about the technology itself.
Our SOC 2 Type II report provides customers and partners with independent, third-party assurance about the controls Tactus AI has implemented to safeguard information, and evidence that those controls operated effectively throughout the examination period.
This work is part of a broader commitment. Tactus AI also maintains ISO 27001 certification for our information security management system, and our security and privacy program is designed to support compliance with applicable HIPAA and GDPR requirements. Together, these measures reflect a comprehensive approach to security, privacy, and data protection built to support customers in regulated, high-stakes environments, not bolted on afterward.
What’s next
Our SOC 2 Type II report is available to customers and prospective partners under NDA. If you’d like to request a copy or learn more about our security program, visit our Trust Center or reach out to info@tactus.ai.
We’ll keep building, and keep proving it, independently, along the way.
Nathan Wildgrube, Head of Quality
