Flourish completes SOC 2 Type 2 examination again

May 13, 2024

Estimated reading time: 2 minutes


We’re proud to share that Flourish has once again completed its System and Organization Control 2 (SOC 2®) Type 2 examination. The year-long examination was conducted by KPMG LLP, a “Big 4” independent third-party accounting and auditing firm. Flourish received its report on Monday, April 22, 2024.

Considered one of the most difficult examinations, the decision to seek a SOC 2 Type 2 report reflects Flourish’s longstanding commitment to security and risk management. The safety of client assets and personal information is a top priority for Flourish, and the receipt of the SOC 2 Type 2 report validates our efforts in this area. The completion of an SOC 2 Type 2 examination demonstrates that the organization has implemented effective controls to protect sensitive information and maintained these standards over an extended period of time. 

The receipt of the report upon completion of the examination serves as independent verification that Flourish satisfies or exceeds the exacting security measures and industry standards relevant to security, availability, processing integrity, confidentiality, or privacy defined by the American Institute of Certified Public Accountants (AICPA). The report validated that Flourish met its selected criteria throughout the audit period.

The criteria covered:

  • Security: Systems and the data stored are protected against unauthorized access and unauthorized disclosure
  • Availability: Information and systems are available for operation and use
  • Confidentiality: Confidential information is protected

The extensive duration of the audit, which took place over a 13-month period, allowed for a deeper and more thorough assessment that resulted in evidence that controls were properly implemented and continuously functioned as expected throughout the evaluation period. 

In April 2022, Flourish completed its SOC 2 Type 1 audit and began to pursue the next level of examination. Flourish received its initial SOC 2 Type 2 in May 2023. It is a voluntary step, but one that is critically important to the organization as we strive to ensure the safety and security of client assets and personal information. 

Flourish will continue to undergo this examination with the aim to maintain a SOC 2 report each year. The report is available upon request. RIAs who are interested in receiving a copy can reach out to the Support team to place a request. 


About Flourish

Flourish builds technology that empowers financial advisors, improves financial lives and retirement outcomes, and delivers new and innovative investment options to advisors. Today, the Flourish platform is used by more than 550 wealth management firms representing more than $1.5 trillion in assets under management. Flourish is wholly-owned by MassMutual. For more information, visit www.flourish.com.


Interested in learning more about Flourish Cash?

Flourish is an online platform through which investors can access financial services and products. Flourish’s offerings are provided by different entities and are subject to different terms, investor protections, and risks. Flourish Cash is offered by Flourish Financial LLC, a registered broker-dealer and FINRA member. Flourish Financial LLC is not a bank. Check the background of Flourish Financial LLC and its personnel on FINRA's BrokerCheck. Flourish Crypto is offered by Paxos Trust Company, LLC, a Flourish Crypto is offered by Paxos Trust Company, LLC, a New York limited purpose trust company regulated by the New York Department of Financial Services that provides custody and execution services for the Flourish Crypto accounts, and Flourish Digital Assets LLC, registered in New York as a commodity broker-dealer and provides website and other services and support for Flourish Crypto accounts. Paxos is not an affiliate of Flourish. Flourish Annuities refers generally to the annuity platform operated by Flourish Technologies LLC, where applicable, and to Flourish Insurance Agency LLC in its capacity as a licensed insurance producer providing insurance services related to such platform. Flourish Insurance Agency LLC does business in California under the name Flourish Digital Insurance Agency. An annuity is an insurance contract. Annuities shown on the platform are sold through Flourish Insurance Agency LLC, a licensed insurance producer, with offices in Jersey City, New Jersey, and are issued by one or more approved licensed life insurance companies. The Flourish entities mentioned above are affiliates. Flourish Cash, Flourish Crypto, and Flourish Annuities accounts are separate accounts and only assets in Flourish Cash accounts may be eligible for protection by the FDIC or SIPC. Please review the Legal section of our website, and the disclosures provided with each Flourish service or product, for further information. If you were introduced or invited to Flourish by an investment advisor or other third party, please be aware that, unless otherwise disclosed to you, they are not affiliated with any Flourish entity. The role of the investment advisor or other firm that invited you to Flourish may vary between different Flourish services and products, as further described in your terms of service. © 2024 Flourish. All rights reserved.