Insurance claims data is some of the most sensitive data in financial services.

That’s why we are proud to announce that MarvelX is now SOC 2 Type I compliant, marking an important milestone in our commitment to enterprise-grade security, reliability, and trust.

For organizations deploying AI in claims workflows, security and compliance must be built into the foundation of the platform. SOC 2 provides an independent framework to validate that foundation.

What Is SOC 2?

SOC 2 is a compliance framework developed by the American Institute of Certified Public Accountants (AICPA). It evaluates how companies design and implement controls to manage and protect customer data.

The framework is based on five Trust Services Criteria:

Security
- Protection against unauthorized access and system misuse.

Availability
- Ensuring systems remain operational and accessible when needed.

Processing Integrity
- Accurate and timely processing of data.

Confidentiality
- Protection of sensitive business information.

Privacy
- Responsible collection, use, and protection of personal data.

SOC 2 reports come in two forms:

Type I
Evaluates whether an organization’s security controls are properly designed and implemented at a specific point in time.

Type II
Evaluates whether those controls operate effectively over an extended period.

Our SOC 2 Type I report confirms that MarvelX has designed and implemented controls aligned with SOC 2 standards, and that these controls were independently assessed by an external auditor.

The assessment reviews key areas such as:

• Infrastructure security

• Access control policies

• Monitoring and logging

• Data protection practices

• Internal security procedures

Why This Matters for Insurance and Claims Teams

For insurers and claims organizations, vendor security is not just a checkbox. It is part of your own regulatory, operational, and reputational risk management.

Our SOC 2 Type I compliance demonstrates that:

• Security controls are formally designed and implemented to protect claims and policyholder data

• Our platform follows structured access management and security governance practices

• Independent auditors have reviewed our security framework and controls

• Your vendor risk and procurement reviews become simpler and faster

• You gain additional assurance when deploying AI within sensitive claims workflows

When working with AI systems that process financial and personal data, trust must be engineered into the platform from day one and SOC 2 Type I is an important step in that process.

Access to Our SOC 2 Type 1 Report

Current and prospective customers can request access to our SOC 2 Type I report or our engagement letter for our SOC 2 Type 2 audit by sending an email to support@marvelx.ai