SOC 1 Type 2 Security Compliance

1. Commitment

Vretta Inc. prioritizes financial reporting systems' accuracy, reliability, and integrity. Our commitment to achieving and maintaining SOC 1 Type 2 compliance reflects our dedication to implementing a robust internal control framework that aligns with the System and Organization Controls (SOC) framework defined by the American Institute of Certified Public Accountants (AICPA).

SOC 1 Type 2 compliance ensures that Vretta's financial systems and processes operate with integrity, safeguarding customer data and financial information from risks and inaccuracies. Since 2021, Vretta has successfully passed SOC 1 Type 2 audits annually, demonstrating our ongoing commitment to upholding the highest industry standards.

Ensuring Compliance with SOC 1 Type 2:

• Financial Reporting Integrity: Ensuring financial transactions are recorded and processed accurately.
• Access Controls: Implementing strict access policies to protect financial data.
• Change Management: Maintaining a controlled environment for system and process changes.
• Risk Management: Identifying and mitigating financial and operational risks.
• Continuous Monitoring: Regularly reviewing internal controls to enhance financial security.

2. Maintaining SOC 1 Type 2 Compliance

To uphold SOC 1 Type 2 compliance, Vretta follows a structured approach that includes continuous assessment of financial reporting controls, internal process enhancements, and ongoing risk management. By fostering a compliance and internal governance culture, we ensure that our financial reporting systems remain secure, reliable, and aligned with regulatory requirements.