Coveo Earns SOC 2 Type II Attestation and HIPAA Compliance Demonstrating Its Commitment to Security

Respective annual and biennial examinations ensure Coveo’s commitment to data security and privacy.

Coveo, a leader in relevance platforms that transform search, recommendations, and personalization within digital experiences, today announced that it has passed its SOC 2 Type II examination, completed by independent CPA firm Schellman & Company, LLC. This examination result is evidence of Coveo’s commitment to data protection and privacy protocols on behalf of its customers, and proof that the company has the necessary processes and internal controls in place to deliver on this promise.

A SOC 2 examination provides an independent, third-party validation that a service organization’s information security practices meet industry standards stipulated by the AICPA. During the examination, a service organization’s non-financial reporting controls as they relate to security, availability, and confidentiality of a system are tested.

The SOC 2 report delivered by Schellman & Company verifies the suitability of the design and operating effectiveness of Coveo’s controls to meet the standards for these criteria.

The Coveo Relevance Cloud™ Platform has also successfully passed and maintains a biennial HIPAA (The Health Insurance Portability and Accountability Act) Compliance Examination, the latest in 2021. This examination reaffirms Coveo’s commitment to protecting ePHI, as required by HIPAA. As such, Coveo offers a HIPAA-compliant environment for customers with whom it signs a BAA (Business Associate Agreement).

The HIPAA-compliant environment is built on a separate platform infrastructure that’s designed to ease compliance with HIPAA requirements. The HIPAA-compliant environment offers more privacy, as it’s dedicated to Coveo’s HIPAA customers and protected by additional security measures and access control procedures. 

“Data security and governance are extremely important to us,” said Laurent Simoneau, Chief Technology Officer at Coveo. “The Coveo Relevance Cloud platform has been engineered with data security in mind - from the ground up. We have adopted rigorous security measures at every stage of development and across every point of delivery to protect our customers’ businesses and their customers’ data.”

For more information about our security, please visit https://www.coveo.com/en/products/platform/security