Independent audit of 116 controls over a 12-month window gives MSPs third-party evidence before they connect a client's Microsoft 365 tenant
KANATA, ON, Oct. 9, 2026 /PRNewswire-PRWeb/ -- Augmentt, the Microsoft 365 security and management platform for managed service providers (MSPs), has completed its annual SOC 2 Type 2 audit and renewed the attestation it first earned in 2022. An independent auditor tested the controls that protect the Augmentt platform and confirmed they were designed correctly and operated effectively across a 12-month audit window.
The 2026 audit covers all five Trust Services Criteria: Security, Availability, Confidentiality, Processing Integrity, and Privacy. Those criteria are the foundation for 116 organizational controls and 163 tests of those controls, spread across nine control areas that run from the control environment and risk assessment through logical and system operations.
When an MSP connects a client tenant to Augmentt, it gives Augmentt delegated access to that client's Microsoft 365 environment. Augmentt treats that access as a target and pays an outside firm to verify its controls every year.
"We ask MSPs to prove their security work to clients every month, so we should hold ourselves to the same expectation," said Derik Belair, CEO and Co-Founder of Augmentt. "Clients, insurers, and auditors now ask MSPs to vouch for every vendor that touches a Microsoft 365 tenant. When Augmentt is the vendor in question, our partners can answer with a current SOC 2 Type 2 report."
Between audits, Augmentt monitors its SOC 2 controls continuously with Vanta. Vanta connects to Microsoft Entra ID, Intune, Defender, GitHub, and AWS, and pulls in findings from Augmentt's independent penetration tests. Intune reports device posture for every company computer, including disk encryption, screen lock, and antivirus status. A named security officer owns the program and works through findings as they come in.
"An annual report covers a year that has already happened," said Belair. "Partners also need to know how we operate the rest of the time, and our answer is the same approach we help MSPs apply to their clients' tenants: set a standard, monitor it continuously, and correct drift if it shows up."
MSPs and their auditors can request the current SOC 2 report and penetration test summaries through the Augmentt Trust Center at trust.augmentt.com and review the evidence before connecting a tenant.
ABOUT AUGMENTT
Augmentt is the Microsoft 365 security and compliance management platform built for MSPs managing multiple client tenants. Growing MSPs use it to build a security baseline once and push it to every client, monitor for threats and policy drift from one dashboard, and give clients the monthly reports that make security a service worth charging for. The platform is built for true multi-tenant delivery, so MSPs work without a golden tenant or workarounds, and their practice holds up when Microsoft changes something. Augmentt is headquartered in Ottawa, Canada. Learn more at augmentt.com.
Media Contact
Michael Keshen, Augmentt, 1 8886708444, [email protected], augmentt.com
SOURCE Augmentt
Share this article