SOC2C

Capital on Tap vs Nirvana Health

Side-by-side SOC 2 compliance: verification level, type, auditor, and renewal timing.

Capital on Tap
capitalontap.com
Nirvana Health
meetnirvana.com
VerificationListedListed
SOC 2 typeSOC 2 Type IISOC 2 Type II
Auditor
Last report
RenewalUnknownUnknown
RegionUnited KingdomUnited States
Size51–200 employees1–50 employees
Certifications
SOC 2 Type IIISO 27001
HIPAASOC 2 Type IISOC 2 Type I
Documents
  • SOC 2 Type IOn request
  • ISMS-DOC-A17-8 Disaster Recovery and High Availability Strategy v1.1 October 2024.pdfOn request
  • Infrastructure & Database High Availability, DR & BCD Testing 2025.pdfOn request
  • SOC 2 Type IIOn request
  • SOC 2 Type IOn request
  • HIPAA Compliance PolicyOn request
  • Human Resource Security PolicyOn request
  • Information Security Roles and ResponsibilitiesOn request
  • Physical Security PolicyOn request
  • Risk Management PolicyOn request
  • Information Security Policy (AUP)On request
  • Asset Management PolicyOn request
  • Incident Response PlanOn request
  • Cryptography PolicyOn request
  • Code of ConductOn request
  • Data Management PolicyOn request
  • Third-Party Management PolicyOn request
  • Secure Development PolicyOn request
  • Access Control PolicyOn request
  • Operations Security PolicyOn request
  • Business Continuity and Disaster Recovery PlanOn request
  • HIPAA Workstation Security PolicyOn request
  • Incident Response Plan HIPAA Addendum with Breach Notification ProceduresOn request
  • Penetration testOn request
HostingAzure
Subprocessors11 listed
Key controlsNot providedNot provided