Palette Software Completes SOC 1 and SOC 2 Examinations

Palette has completed both the Type 2 SOC 1 and Type 2 SOC 2 examinations for the PaletteArena Software as a Service for the review period from November 1, 2020, to October 31, 2021. The examinations were performed by the independent CPA firm Schellman & Company, LLC.

By engaging an independent CPA to examine and report on Palette’s controls, Palette can respond to meet the needs of user entities and have an objective evaluation of the effectiveness of controls that address operations and compliance, as well as financial reporting at those user entities.

• SOC 1 – Reporting on controls at a service organization relevant to user entities’ internal control over financial reporting
• SOC 2 – Reporting on controls at a service organization relevant to security and availability.

Specific control objectives included in the SOC 1 report include Data Backup, System Monitoring, Information Security, Application Change Control, Data Communications, Customer Provisioning, and Invoice and Expense Processing.