Security & Compliance Documentation
We make our security posture transparent. Download our compliance artifacts below — SOC 2 summary, penetration test results, SBOM, and our vulnerability disclosure policy.
Public compliance artifacts
These artifacts represent a subset of our full compliance evidence pack. Artifacts marked Available Q3 2026 are currently in progress. Contact us to discuss NDA-gated full reports.
SOC 2 Type II Summary
Annual third-party audit report of our security, availability, and confidentiality controls conducted by a PCAOB-registered CPA firm. Current: 2025 audit in progress.
Penetration Test Results
Annual external penetration test conducted by Bishop Fox. Covers web application, API, and network layers across our production infrastructure. Last test: March 2026.
Software Bill of Materials (SBOM)
CycloneDX SBOM for all production services. Lists every third-party library, dependency version, and known CVE status across the AiT product family.
Vulnerability Disclosure Policy
Our responsible disclosure program. If you discover a security issue in our products or infrastructure, this policy outlines how to report it and what to expect from us in return.
Need the full SOC 2 report or detailed pen-test findings?
The full SOC 2 Type II report and unredacted penetration test findings are available under mutual NDA to qualified prospects and existing clients. Schedule a call and we’ll walk you through the evidence pack live.
Artifact update cadence
We maintain a predictable release schedule for all compliance artifacts so your security team can plan reviews in advance.
| Artifact | Frequency | Last Updated | Status |
|---|---|---|---|
| SOC 2 Type II Summary | Annual | 2024 (2025 in progress) | In Progress |
| Penetration Test Executive Summary | Annual | March 2026 | Current |
| Software Bill of Materials (SBOM) | Per release | On each production deploy | Current |
| Vulnerability Disclosure Policy | As needed | May 2026 | Current |
| Sub-processor List | Quarterly | Q1 2026 | NDA Required |
| Data Processing Addendum (DPA) | Annual review | January 2026 | On Request |
Want a live compliance dashboard for your own organization?
AiT Trust Portal gives your clients and prospects a public-facing security posture page with always-current evidence — no more ZIP files or stale PDFs.
Page as of 2026-05-18. Compliance artifacts marked “Available Q3 2026” are in progress; contact security@intelligentit.io for current-cycle evidence under NDA. © Intelligent Group (DBA Intelligent iT) · intelligentit.io
One team
For the bold. For what's next.
Most growing firms juggle four to seven IT vendors. Our clients have one team, one number, and one invoice.
Services
What we run.
Security
24/7 security operations.
Managed SOC, Zero Trust, and audit-ready evidence for SOC 2 and HIPAA.
Managed IT
Senior engineers, no tiers.
US-based senior engineers on every ticket. Flat per-user pricing, billed annually.
AI automation
AI that does the work.
Automation handles routine IT work so your team can focus on what matters. Approved workflows cover new hires and leavers.
Build your next advantage.
Thirty minutes with a senior architect. You leave with a scope, a number, and a start date, or a straight answer that you don't need us yet.