SOC 2
Independent audit not completed
Our preparation targets controls for security and the availability, confidentiality, processing integrity and privacy of the services in scope. We have not received an independent SOC 2 report.
PoeTech Global · Trust & Security
Clear safeguards.
Accurate commitments.
We are working toward assessment readiness while being transparent about the controls already implemented and the work still ahead.
Readiness work in progress. No certification or verified compliance claimed.
Safeguards built into the application
- Server-side authorization for protected administrator tools.
- Encrypted server-side storage for saved integration credentials.
- Scoped assistant access and approval controls for supported consequential actions.
- Signed Stripe webhook verification and separate test/live payment configuration.
- Optional audience analytics with privacy choices and retention controls.
These application controls support preparation; they do not by themselves establish organizational compliance or independent audit readiness.
Assessment and governance targets
ISO/IEC 27001:2022
Not certified
Information security management is a program target. Risk treatment, documented policies, access reviews, incident response and recovery evidence remain part of the preparation work.
ISO/IEC 27701:2025
Not certified
Privacy information management is a program target for customer, learner and connected-account data. Certification has not been obtained.
ISO/IEC 42001:2023
Not certified
AI management is a program target, including oversight, permitted use, evaluation and provider accountability. This target does not establish certification of our AI services.
HIPAA readiness planning
PHI workflows are not approved
Protected health information must not be submitted to the site, assistant conversations, uploads or general consultation forms. Before an applicable PHI workflow can be approved, the service scope, risk analysis, administrative and technical safeguards, appropriate vendor services and required business associate agreements must be reviewed.
General healthcare education and an encrypted credential vault do not make a service HIPAA compliant. No completed HIPAA assessment or executed vendor agreement is represented by this page.
ADA and accessibility
Our engineering target is WCAG 2.2 Level AA. Complete-page, keyboard, screen-reader, media and document assessment work remains in progress. Full-site conformance has not been established.
Read the accessibility statement and request assistance ↗Payments processed by Stripe
Card entry for purchases uses Stripe-hosted Checkout. PoeTech keeps the order and fulfillment references needed to provide books, courses and consultations. Stripe processing does not automatically establish PoeTech's own PCI DSS validation; merchant assessment responsibilities remain separate.
For purchase or access support, contact poetechglobal@gmail.com with your order number. Do not send card numbers or sensitive medical information.
What remains before independent assessment
The preparation program includes defined assessment scope, policy adoption, access reviews, vendor assessments, incident exercises, tested recovery procedures and evidence collection. The broader readiness register and accessibility repairs are planned work; this page does not imply those changes have been completed.
Customers with specific contractual security requirements should discuss the intended service and data with PoeTech before an engagement.
Framework references
Last updated October 14, 2026 · Contact PoeTech