Requirement evaluated: SOC 2 Type II certification for the platform
For your CFO and audit committee, Ramp holds a current SOC 2 Type 2 report covering the period ending October 2024, issued through its annual independent audit cycle. The report is available for download from Ramp's public Trust Center at trust.ramp.com (powered by SafeBase): a prospective customer submits an access request, signs an NDA electronically within the portal, and can then view and download the full report. …
Limitations: The report is gated behind an NDA, which is standard practice but means your legal team must execute that agreement before your auditors can review the document. The audit period runs through October each year, so if your own audit cycle falls in the spring, you may be working from a report that is 5-6 months old at th …