Trust Center

Welcome to the Skience LLC Trust Center. This portal is designed to provide you with a clear and accessible overview of our commitment to security and trust. Here, you will find detailed information about our practices, policies, and controls that safeguard your data and ensure the reliability of our services.

Skience LLC is dedicated to maintaining a robust security posture. We demonstrate this commitment through rigorous independent audits, such as our SOC 2 Type 2 examination, which covers the period of October 1, 2024, to September 30, 2025. This report assesses the suitability of the design and operating effectiveness of our controls relevant to Security, Availability, Processing Integrity, and Confidentiality. Our services are hosted on Azure, and we work with subservice organizations to ensure our service commitments and system requirements are met.

Our trust program is built upon a foundation of comprehensive policies and operational practices. We have a defined and documented information security policy and other topic-specific policies to support our internal controls. A dedicated security team is responsible for the design, implementation, management, and review of our security policies, standards, and procedures.

Key aspects of our security and privacy framework include:

• Data Protection: We prioritize the protection of personally identifiable information (PII). We have established training programs to ensure our personnel understand their obligations regarding PII protection and regulatory requirements. We also have processes in place to obtain and record consent from data subjects before collecting PII. Furthermore, we maintain data processing agreements with sub-processors, outlining the technical and organizational measures they must implement to align with our privacy program.
• Operational Security: We employ various controls to maintain the security of our systems and data. This includes maintaining visitor logs for facilities where sensitive data may be stored or transmitted, and utilizing a centralized system for collecting and storing logs of system activity, with restricted access to authorized personnel. We also have an established key management process to support our use of cryptographic techniques.
• Accountability and Oversight: Our management is responsible for preparing the description and assertion of our system, identifying risks, and selecting applicable trust services criteria. We also have documented job descriptions that outline roles and responsibilities for each position within the company.

This Trust Center serves as a central resource for understanding how Skience LLC upholds its commitment to security, availability, processing integrity, and confidentiality. We invite you to explore the detailed sections within this portal to learn more about our specific controls and practices.