System Automation is proud to announce Evoke, our highly scalable, cloud-native regulatory management platform, has successfully completed its SOC 2 Type 2 audit. This milestone demonstrates our unwavering commitment to data security, privacy, and compliance—and reinforces the trust our state and local government customers place in us to safeguard sensitive data.
What SOC 2 Type II Certification Means
Developed by the American Institute of Certified Public Accountants (AICPA), a SOC 2 Type 2 audit evaluates how effectively an organization’s systems and controls protect customer data over time.
While a SOC 2 Type 1 report validates the design of security controls, a Type 2 report goes further verifying both the design and operational effectiveness of those controls across an extended review period.
For Evoke, this means independent auditors confirmed that System Automation’s cloud infrastructure, access management, and change-control processes are not only in place but consistently executed and monitored.
A Team Effort in Building a Secure Platform
Earning SOC 2 Type 2 certification was the result of months of collaboration across the System Automation team.
- Patrick Sarpong, Security Compliance Analyst, led the effort, coordinating evidence collection, policy documentation, and auditor communications.
- Allan Tong, Software Developer Lead, managed the most technical audit requests, from source-code controls to encryption key management.
- Jeff Steyer, Vice President of Engineering, supported network architecture reviews and Azure environment demonstrations.
- Dwan Keith, Human Resources Manager, enhanced HR approval workflows to strengthen access provisioning.
- Elana Glassberg, Controller, provided critical accounting system validation.
Their work—and the dedication of many others—ensures that every Evoke customer benefits from a platform built on the highest standards of information security and operational excellence.
Why Security Compliance Matters for State Agencies
For regulatory agencies, licensing boards, and permitting authorities, trust and transparency are essential.
By achieving SOC 2 Type 2 compliance, System Automation provides assurance that:
- Evoke meets stringent standards for data confidentiality, integrity, and availability.
- Security controls are designed, tested, and maintained across every layer of the platform.
- Agencies can confidently modernize licensing and permitting systems knowing their data is protected.
This certification aligns with our mission to help agencies move from manual to modernized operations—with a secure foundation that supports digital transformation, automation, and analytics.
Building on a Legacy of Trust
Security has always been a cornerstone of Evoke’s architecture. The SOC 2 Type 2 certification builds on our Type I audit earlier this year and represents another step toward continuous improvement in protecting customer data and maintaining compliance with evolving standards.
“Our customers trust us to manage highly sensitive regulatory information, and gain real-time visibility—all within a secure, audit-ready environment.
Achieving SOC 2 Type 2 certification reinforces that this trust is well-placed,” said Charles Rubin, President of System Automation. “We’re proud of our people, our process, and our platform.”
Learn more about Evoke.