Trust comes first

When someone reaches out to 211, they are often sharing things they have never said out loud. That they cannot make rent this month. That there is no food in the house. That they do not feel safe at home. They share it because they trust that whoever is on the other end will handle it with care.

Handling it with care means more than a kind response. What someone shares becomes information about their life, and it has to be protected long after the conversation ends. When a 211 partners with Keeper, many of those conversations now begin with AI, and that responsibility extends to us.

We take it seriously. That is why we are proud to share that Keeper Systems has completed its SOC 2 Type II audit, independent verification that we protect this information the way 211s, and the people they serve, deserve.

What SOC 2 Type II means

SOC 2 is an independent audit framework developed by the American Institute of Certified Public Accountants (AICPA). It evaluates how a company protects the data entrusted to it.

There are two types of SOC 2 reports. A Type I report looks at whether the right controls are in place on a single day. A Type II report goes further. It tests whether those controls actually worked, day after day, over an extended period of time.

Advantage Partners, an independent CPA firm, examined Keeper’s controls against the AICPA Trust Services Criteria for security over an observation period from May 18 to August 18, 2026. The audit returned a clean opinion with no exceptions noted.

Why it matters for 211s

211s sit at the center of their communities’ safety nets. They hold sensitive information about the people they serve, and they answer to the United Ways, state agencies, and funders that support them. Before adopting any new technology, they need confidence that it meets the same standard of care they hold themselves to.

A SOC 2 Type II report gives 211 leaders and IT teams independent evidence of how Keeper protects that information. It answers many of the questions that come up in a vendor security review, so teams can spend less time on paperwork and more time on the people they serve.

Built for safety above all

Every conversation Keeper supports may involve someone’s personal or health information, and every one of them deserves protection. The safeguards behind them are now independently verified:

  • Customer data is encrypted in transit and at rest, including backups.
  • Keeper never uses customer data to train AI models.
  • Staff access requires single sign-on with multi-factor authentication and is reviewed quarterly.
  • Our systems are continuously monitored and scanned for vulnerabilities.
  • A documented incident response plan guides how we respond to any security event.

Looking ahead

SOC 2 is not a one-time achievement. We will be audited annually, and we will keep strengthening our security program as Keeper grows. Keeper also follows HIPAA safeguards for protected health information, a foundation for meeting the standards that healthcare organizations and government agencies expect.

Our goal is simple: every organization that trusts Keeper with the people they serve should be able to do so with confidence.

To request our SOC 2 Type II report, visit our Trust Center. To learn more about how we protect data, see our security page, or contact our team at security@usekeeper.com.