DFI Technology, Inc. supports customers in their efforts to meet the regulatory demands of their industry or governing agency. DFIT is independently audited every year under the AT101, Attestation Engagements, and the AICPA Guide, TSP100, "Reporting on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy" audit standards issued by the American Institute of Certified Public Accountants ("AICPA"). This annual audit produces a Service Organization Controls ("SOC") 2 Report, which replaces the previous SAS 70 reports.
A SOC2 report is the report used by customers or stakeholders to gain confidence and place trust in DFIT's systems. AT101 and TSP100 are the authoritative guidance for performing and issuing SOC2 reports. Because DFIT does not process transactions impacting financial statement assertions used for financial reporting, DFIT's independent auditor performed a SOC2 report examination. The SOC2 report is intended to meet the needs of a broad range of users that need information and assurance about the controls at DFIT that affect the security, availability, and processing integrity of the systems that DFIT uses to process data and the confidentiality of the information processed by our systems.
The company is subject to regular, company-wide internal audits and is audit-ready for customers who need assistance in meeting the requirements of many certifications and regulatory demands, including: