Flourish completes annual SOC 2 Type 2 examination

We are proud to share that Flourish has once again completed its System and Organization Control 2 (SOC 2®) Type 2 examination. Five years of successfully-completed SOC 2 examinations, with four years of SOC 2 Type 2 examinations, underscores Flourish's commitment to maintaining a culture that prioritizes security. Flourish was issued its most recent report on January 5, 2026.

The year-long examination was conducted by A-LIGN Assurance, an accredited audit firm widely used throughout the tech industry. Once again, Flourish demonstrated that it has maintained an incredibly high standard of control across the organization and was issued a clean report with no exceptions identified in the assessment. This is a very high standard to uphold that speaks to the quality and care of how Flourish teams execute on a daily basis, particularly in a year with significant growth, including a strategic acquisition and expanding enterprise relationships.

Considered one of the most difficult examinations, the continued completion of a SOC 2 Type 2 report reflects Flourish’s longstanding commitment to security and risk management. The safety of client assets and personal information is a top priority for Flourish, and the receipt of the SOC 2 Type 2 report validates our efforts in this area. The completion of a SOC 2 Type 2 examination demonstrates that the organization has implemented effective controls to protect sensitive information and maintained these standards over an extended period of time. 

The receipt of the report upon completion of the examination serves as independent verification that Flourish satisfies or exceeds the exacting security measures and industry standards relevant to security, availability, processing integrity, confidentiality, or privacy defined by the American Institute of Certified Public Accountants (AICPA). The report validated that Flourish met its selected criteria throughout the audit period.

The criteria covered:

• Security: Systems and the data stored are protected against unauthorized access and unauthorized disclosure
• Availability: Information and systems are available for operation and use
• Confidentiality: Confidential information is protected

The duration of the audit, which took place over a 12-month period, allowed for thorough assessment that resulted in evidence that controls were properly implemented and continuously functioned as expected throughout the evaluation period.

In April 2022, Flourish completed its SOC 2 Type 1 audit and began to pursue the next level of examination. Flourish received its initial SOC 2 Type 2 in May 2023, its second in May 2024, and its third in January 2025. It is a voluntary step, but one that is critically important to the organization as we strive to ensure the safety and security of client assets and personal information.

Flourish will continue to undergo this examination with the aim to maintain a SOC 2 report each year. The report is available upon request. RIAs who are interested in receiving a copy can reach out to the Support team to place a request. 

About Flourish

Flourish builds technology that empowers financial advisors, improves financial lives and retirement outcomes, and delivers new and innovative investment options to advisors. Today, the Flourish platform is used by more than 1,100 wealth management firms representing more than $2.6 trillion in assets under management. Flourish is wholly-owned by MassMutual. For more information, visit www.flourish.com.