Compliance at Clark
Compliance, on record
Examinations, certification, and supporting documents for your firm's evaluation of Clark. Review the evidence, confirm the scope, and bring your requirements into the conversation.
SOC 1® Type 2
Independent examination
Clark has completed a SOC 1 Type 2 examination covering controls relevant to customers’ internal control over financial reporting.
What to check
Request the current report to review the examination period and the controls in scope.
- Which services and controls are included in the report?
- How does the examination period relate to your firm's review?
- What responsibilities does the report identify for your firm?
SOC 2® Type 2
Independent examination
Clark has completed a SOC 2 Type 2 examination against the AICPA Trust Services Criteria.
What to check
Confirm the applicable criteria, systems, and examination period in the current report.
- Which Trust Services Criteria are covered?
- Does the described system match your proposed use of Clark?
- Are there findings or scope limitations your team needs to discuss?
ISO/IEC 27001
Information security management
Clark is certified to ISO/IEC 27001 for information security management.
What to check
Request the current certificate to review its scope and validity dates.
- Which entity and activities are included in the certificate?
- What are the certificate's issue and validity dates?
- How does the certified scope relate to your proposed deployment?
HIPAA
Health data safeguards
Clark supports HIPAA requirements through security and data-handling controls for firms working with protected health information.
What to check
Confirm the controls, deployment details, and supporting agreements that apply to your firm's proposed use of Clark.
- Will the proposed deployment process protected health information?
- Which safeguards and agreements apply to that deployment?
- How are access, retention, and incident responsibilities documented?
GDPR
Privacy and data protection
Clark supports GDPR requirements through privacy, access, and data-handling controls for applicable processing.
What to check
Confirm the processing roles, data locations, subprocessors, and contractual terms that apply to your firm's deployment.
- Which processing roles apply to Clark and your firm?
- Where is applicable data processed and which subprocessors are involved?
- How are data-subject requests, retention, and deletion handled?
See Clark in action
The peer review guarantee, in practice
Watch Ava prepare a workpaper, then trace every figure back to the source document, the change, and the approval.