Fintoc vs Nirvana Health

Side-by-side SOC 2 compliance: verification level, type, auditor, and renewal timing.

	Fintoc fintoc.com	Nirvana Health meetnirvana.com
Verification	Listed	Listed
SOC 2 type	—	SOC 2 Type II
Auditor	—	—
Last report	—	—
Renewal	Unknown	Unknown
Region	—	United States
Size	—	1–50 employees
Certifications	ISO 27001PCI DSS	HIPAASOC 2 Type IISOC 2 Type I
Documents	—	SOC 2 Type IIOn request SOC 2 Type IOn request HIPAA Compliance PolicyOn request Human Resource Security PolicyOn request Information Security Roles and ResponsibilitiesOn request Physical Security PolicyOn request Risk Management PolicyOn request Information Security Policy (AUP)On request Asset Management PolicyOn request Incident Response PlanOn request Cryptography PolicyOn request Code of ConductOn request Data Management PolicyOn request Third-Party Management PolicyOn request Secure Development PolicyOn request Access Control PolicyOn request Operations Security PolicyOn request Business Continuity and Disaster Recovery PlanOn request HIPAA Workstation Security PolicyOn request Incident Response Plan HIPAA Addendum with Breach Notification ProceduresOn request Penetration testOn request
Hosting	GCP	—
Subprocessors	2 listed	—
Key controls	Not provided	Not provided