KLoBot Achieves SOC 2 Type II Across All Five Criteria

An independent examination confirmed that KLoBot's controls were suitably designed and operating effectively across all five Trust Services Criteria.


KLoBot, Inc. is SOC 2 Type II certified, independently audited across all five Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality and Privacy

– KLoBot, Inc., an enterprise software company that provides a Private, Secure AI Agentic Process Automation platform along with solutions that seamlessly connect organizational data and document management systems across Microsoft 365, today announced that it has successfully completed its SOC 2 Type II audit, covering all five Trust Services Criteria: Security, Availability, Confidentiality, Privacy and Processing Integrity.

The audit covered the period from August 1, 2025 through July 31, 2026, and the independent examination confirmed that KLoBot's controls were suitably designed and operating effectively throughout the entire period.

ReportSOC 2 Type II
Audit PeriodAugust 1, 2025 to July 31, 2026
Criteria CoveredAll five Trust Services Criteria
StandardAICPA SSAE 21

What SOC 2 Type II Means for Our Customers

SOC 2 Type II is the gold standard in security compliance for technology service providers. Unlike a Type I report, which evaluates the design of controls at a single point in time, a Type II report examines the operational effectiveness of those controls over an extended period, in KLoBot's case, a full twelve months. This gives customers, partners and stakeholders the highest level of independent assurance that KLoBot's systems and practices consistently safeguard their data.

The examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants (AICPA) under SSAE 21, confirming that KLoBot's controls met all applicable Trust Services Criteria.

Comprehensive Coverage Across All Five Trust Services Criteria

KLoBot's SOC 2 Type II report spans the complete set of Trust Services Criteria, demonstrating the company's holistic approach to risk management and data stewardship:

  • Security. Protecting systems and data against unauthorized access through robust logical and physical access controls, including role-based access, just-in-time privileged identity management via Microsoft Entra PIM, and periodic access reviews.
  • Availability. Maintaining infrastructure that ensures capacity demands are met, with disaster recovery and business continuity plans in place to minimize service disruptions.
  • Confidentiality. Encrypting customer data both at rest and in transit and enforcing data-handling policies that restrict access on a least-privilege basis.
  • Privacy. Safeguarding personal information in accordance with documented privacy policies and regulatory requirements.
  • Processing Integrity. Ensuring that system processing is complete, accurate, timely and authorized.

Products and Services in Scope

The audit covered KLoBot's full suite of enterprise products and services:

  • KLapper. A Private, Secure AI Agentic Process Automation platform that enables organizations to build, deploy and manage AI-powered chatbots using supported large language models (LLMs). KLapper integrates with enterprise applications including Microsoft Teams, SharePoint, iManage, NetDocuments, websites, mobile applications and other line of business applications to deliver secure, intelligent access to organizational knowledge and automated business processes.
  • netDocShare. A solution that enables users to view, edit, sync and search NetDocuments content in Microsoft SharePoint, Teams, OneDrive for Business and File Shares, supporting seamless collaboration and business continuity.
  • imDocShare. A solution that enables users to view, edit, sync and search iManage content in Microsoft SharePoint, Teams, OneDrive for Business and File Shares, supporting seamless collaboration and business continuity.

Enterprise-Grade Controls You Can Count On

The SOC 2 Type II report validated a wide range of operational and security controls, including:

  • Access Management. User access provisioned through Microsoft Entra ID with defined onboarding and offboarding procedures, and access requests requiring approval from designated system owners based on documented business requirements.
  • Privileged Access Management. Just-in-time elevation through Microsoft Entra Privileged Identity Management (PIM) with approval workflows, limited activation periods and comprehensive audit logging. Permanent assignment of highly privileged roles is minimized and shared accounts are prohibited.
  • Change Management. All changes are authorized, tested and approved prior to implementation.
  • Data Protection. Production media is securely decommissioned and physically destroyed prior to leaving the data center. Customer-facing websites are secured with certificates that are tracked and renewed in advance of expiration.
  • Environmental Controls. Physical environmental protections are installed in data center facilities to safeguard infrastructure.
  • Vendor Management. Vendor assessments are performed for all third-party providers to ensure alignment with KLoBot's security and compliance requirements.
  • Continuous Monitoring. Automated alerts notify operational personnel based on predefined criteria, enabling rapid detection and response to potential incidents.

A Message from Leadership

"Achieving SOC 2 Type II across all five Trust Services Criteria is a significant milestone that validates the security-first culture we have built at KLoBot. Our customers entrust us with their most sensitive data and critical business processes. This provides independent, third-party assurance that our controls are not only well-designed but operate effectively day in and day out. It reinforces our commitment to delivering AI-powered solutions that organizations can deploy with confidence."

Ragav Jagannathan, President & Group CEO, KLoBot, Inc.

About KLoBot, Inc.

KLoBot, Inc. is a technology company that develops artificial intelligence (AI), enterprise content management and business process automation solutions. Its flagship platform, KLapper, is a generative AI-powered, no-code chatbot builder that enables organizations to deploy intelligent virtual assistants integrated with leading enterprise applications. KLoBot serves organizations looking for secure, scalable and compliant technology solutions that unlock the power of AI across their operations.

Media Contact
KLoBot, Inc.
Email: info@klobot.ai
Website: www.klobot.ai