SOC 2 at ReBillion
Honest posture. The AI-native transaction coordinator aiming for brokerage-grade SOC 2. The AI control plane for real estate built with security review in mind from day one.
SOC 2 Type II is the standard the brokerage industry asks for when an AI tool sits across customer data. We're in pre-audit; here is the current state and the target.
Current state
We are preparing for SOC 2 Type II: readiness work is underway across the Trust Services Criteria and we are evaluating audit firms.* We plan a 6-month observation window once a firm is engaged.
Target
We are aiming for a Type II report within roughly 12 months of engaging an audit firm.* Timing depends on readiness work and the observation window. The report will be shared under NDA once available.
What we plan to be audited against
Security (full), Availability, Confidentiality. Privacy and Processing Integrity scoped at customer request.
Controls
Access controls, change management, vulnerability management, incident response, vendor management, monitoring. Full controls matrix shared under NDA.
How to get evidence
Reach out via /contact for the readiness evidence package under NDA.
What if you're pre-SOC-2?
Most brokerages buy in pre-audit because the AI TC moat is so material. Some require interim evidence (penetration test report, controls matrix); we can share both.
* Planned — subject to audit-firm engagement and readiness work. We do not commit to a specific certification date (see our Terms of Service, Section 9).
Frequently asked
When will the SOC 2 report be ready?
We are aiming for a Type II report within roughly 12 months of engaging an audit firm; timing depends on readiness work and the observation window.
Can I deploy ReBillion before SOC 2 is ready?
Yes. Most enterprise customers do, with interim controls evidence.
What firm is your auditor?
We are evaluating audit firms; we'll disclose the engaged firm under NDA.
What's the scope?
Security and Confidentiality TSC. Availability scoped. Privacy and Processing Integrity scoped at customer request.
Is ISO 27001 on the roadmap?
Evaluated. Most U.S. brokerages prioritize SOC 2 first; we follow demand.
Can I see the controls matrix?
Yes under NDA. Contact /contact.
See the AI control plane on your real files.
30-minute live demo with the founders. No sandbox; we run on your contracts.