SOC 2 Type II: Our commitment to security

SOC 2

Security has been a top priority for Meridian from day one. As former PE investors, we know first-hand how sensitive and confidential your data is. That’s why, from the initial design phase to deployment and maintenance, security considerations are integral to every step of our product development.

As part of our commitment to security, we're proud to announce that we have successfully obtained our SOC 2 Type II attestation report.

‍With our SOC 2 Type II report, we also commit to annual penetration testing performed by skilled external testers to validate our technical controls and continue to harden our product and codebase.

Key security frameworks for AI

We believe that security isn’t just a checkbox activity– it’s an ongoing process that should always be top of mind across firm operations. As a platform with significant AI-native workflows, we follow multiple AI security frameworks to ensure the highest privacy standards for clients. We’ve been shocked at how many new AI startups don’t take a serious approach to safeguarding customer data. In private equity this is a non-starter.

NIST AI Risk Management Framework (RMF)

Meridian adheres to the NIST AI RMF to manage the risks associated with AI systems effectively. This framework provides a comprehensive approach to ensuring the trustworthiness and responsible use of AI technologies.

OWASP Security Knowledge Framework (SKF) + AI

Our security requirements for AI-based solutions are rooted in the OWASP SKF. This framework provides a comprehensive guide to implementing security best practices specific to AI technologies.

ISO 42001 Alignment

Meridian aligns its security strategy with ISO 42001 standards, which focus on enhancing information security management systems (ISMS) for AI systems. This alignment ensures that our security practices are internationally recognized and meet the highest standards of information security. Meridian will be pursuing compliance with ISO 27001 and 42001 in the coming months.

A guide to Meridian’s security practices

Our focus on security doesn’t end here. We take our clients’ privacy very seriously and are happy to dive deeper into how Meridian can satisfy your firm’s security requirements. For more detail on our security practices, you can:

• review our security page
• access our trust report
• request access to our SOC 2 attestation report
• contact our CISO at ciso@meridian-ai.com