Tray.ai | Trust Center

We're pleased to announce that we have successfully completed our SOC 1 Type 2 examination, conducted by Schellman & Company, LLC.

This independent audit validates that our controls relevant to user entities' internal control over financial reporting are suitably designed and operating effectively. The examination covered the period from August 1, 2024, to July 31, 2025, and demonstrates our commitment to maintaining robust controls that support our customers' financial reporting requirements.

What This Means for You

SOC 1 Type 2 compliance provides assurance that:

• Our control environment meets rigorous industry standards for financial reporting controls
• Independent auditors have verified both the design and operational effectiveness of our controls over a 12-month period
• Your organisation can rely on our platform as part of your own internal control over financial reporting (ICFR) framework

This achievement complements our existing SOC 2 Type 2 certification, reinforcing our dedication to security, compliance, and operational excellence across all aspects of our service delivery.

CVE-2024-3094: We can confirm that Tray is not affected by this vulnerability. Tray uses Amazon Linux which AWS has confirmed that neither their customer nor infrastructure is impacted https://aws.amazon.com/security/security-bulletins/AWS-2024-002/

We can confirm that Tray does not use this software and is therefore not affected by this vulnerability.