Baleen Solutions Achieves Full SOC 2 Type 2 Certification: Reinforcing Our Commitment to Secure Self-Employed Income Analysis

Baleen Solutions Achieves Full SOC 2 Type 2 Certification

Baleen Solutions has achieved SOC 2® Type 2 certification, demonstrating that our security controls aren’t just well‑designed, but operate effectively over time. This milestone builds on our SOC 2 Type 1 compliance, giving our partners even greater assurance that sensitive borrower data is handled securely and reliably.

By integrating Baleen’s automated, self‑employed income analysis, our partners accelerate their pipelines and cut costs through fast & accurate machine vision scanning of tax documents, auditable income estimates, missing‑form alerts, and exports to Fannie Mae Income Calculator - on a platform hosted in U.S.‑based, end‑to‑end encrypted servers.

Understanding SOC 2 Type 2

SOC 2® Type 2 is an AICPA standard that validates both the design and operating effectiveness of controls over a continuous period, typically six to twelve months. Unlike a Type 1 report, which reviews controls at a single point in time, Type 2 audits ensure those controls function reliably throughout the audit window.

Lending institutions process sensitive borrower data, and SOC 2 Type 2 ensures robust controls are in place to protect personally identifiable information (PII) and maintain confidentiality and privacy which are key pillars of the Trust Services Criteria. By demonstrating continuous monitoring and testing of these controls, lenders can satisfy regulatory requirements such as the Gramm‑Leach‑Bliley Act (GLBA) and related state‑level privacy laws.

SOC 2 compliance also underpins a lender’s third‑party risk management strategy by verifying that all technology partners adhere to the same high standards of data protection, mitigating vulnerabilities that could arise from vendor ecosystems. Furthermore, maintaining SOC 2 Type 2 certification builds trust with borrowers and investors alike, positioning lenders as security‑first organizations in a competitive landscape

Our Journey to Certification

Building on our June 2024 SOC 2 Type 1 achievement, we conducted a thorough gap analysis, refined policies, and implemented continuous monitoring processes. Thoropass, an independent AICPA‑licensed auditor, coordinated a penetration test and evaluated our controls over several months, culminating in our SOC 2 Type 2 report.

What This Means for Our Customers

Lenders, integrators, and auditors can now rely on Baleen’s audited processes to satisfy due diligence and risk‑management requirements, knowing that our platform maintains the highest standards of security, availability, and privacy.

SOC 2 Type 2 certification is a milestone, not a finish line. We continue to undergo annual audits, enhance our control environment, and update documentation to exceed evolving industry standards, empowering our customers can lend with confidence.

---

Baleen Solutions is a leading service provider in the fintech industry, specializing in innovative solutions for lenders, tax, and wealth management. With a commitment to driving efficiency and accessibility to decisions, Baleen leverages cutting-edge technology to streamline critical processes and empower partners to thrive in today's competitive marketplace. media@baleensolutions.com