< Back

Press releases

June 21, 2021

Coveo Earns SOC 2 Type II Attestation and HIPAA Compliance Demonstrating Its Commitment to Security

June 21, 2021 | Montreal, QC And Quebec City, QC

Respective annual and biennial examinations ensure Coveo’s commitment to data security and privacy.

 Coveo, a leader in relevance platforms that transform search, recommendations, and personalization within digital experiences, today announced that it has passed its SOC 2 Type II examination, completed by independent CPA firm Schellman & Company, LLC. This examination result is evidence of Coveo’s commitment to data protection and privacy protocols on behalf of its customers, and proof that the company has the necessary processes and internal controls in place to deliver on this promise.

A SOC 2 examination provides an independent, third-party validation that a service organization’s information security practices meet industry standards stipulated by the AICPA. During the examination, a service organization’s non-financial reporting controls as they relate to security, availability, and confidentiality of a system are tested.

The SOC 2 report delivered by Schellman & Company verifies the suitability of the design and operating effectiveness of Coveo’s controls to meet the standards for these criteria.

The Coveo Relevance Cloud™ Platform has also successfully passed and maintains a biennial HIPAA (The Health Insurance Portability and Accountability Act) Compliance Examination, the latest in 2021. This examination reaffirms Coveo’s commitment to protecting ePHI, as required by HIPAA. As such, Coveo offers a HIPAA-compliant environment for customers with whom it signs a BAA (Business Associate Agreement).

The HIPAA-compliant environment is built on a separate platform infrastructure that’s designed to ease compliance with HIPAA requirements. The HIPAA-compliant environment offers more privacy, as it’s dedicated to Coveo’s HIPAA customers and protected by additional security measures and access control procedures.

“Data security and governance are extremely important to us,” said Laurent Simoneau, Chief Technology Officer at Coveo. “The Coveo Relevance Cloud platform has been engineered with data security in mind – from the ground up. We have adopted rigorous security measures at every stage of development and across every point of delivery to protect our customers’ businesses and their customers’ data.”

For more information about our security, please visit https://www.coveo.com/en/products/platform/security

About Coveo

We believe that relevance is critical to winning in the new digital experience economy. Coveo is a market-leading AI-powered relevance platform. We aim to enable our customers to deliver the relevant experiences that we believe people expect in the new digital economy. Our SaaS-native, multi-tenant platform injects search, recommendations, and personalization solutions into digital experiences.

We provide solutions for Ecommerce, service, website, and workplace applications. Our solutions are designed to provide tangible value to our customers by helping drive revenue growth, reduce customer support costs, increase customer satisfaction and website engagement, and improve employee proficiency and satisfaction.

Our AI powers relevant interactions for hundreds of the world’s most innovative brands and is supported by a large network of global system integrators and implementation partners.

Coveo is a trademark of Coveo Solutions Inc.

Coveo is a trademark of Coveo Solutions, Inc.

Stay up to date on the latest Coveo news and content by subscribing to the Coveo blog, and following Coveo on LinkedInTwitter, and YouTube.

Highwire PR
+1 418-263-1111

About Schellman & Company

Schellman & Company, LLC is a leading provider of attestation and compliance services—the only company in the world operating under one legal entity that is a CPA firm, a globally approved PCI QSA, an ISO Certification Registrar, HITRUST CSF Assessor, and a FedRAMP 3PAO.
Schellman & Company, LLC