VCA Software Strengthens Client Assurance with Type 2 Reports Under Both SOC 1 and SOC 2
VCA Software has completed SOC 1 Type 1 and Type 2 examinations with Prescient Assurance, joining its SOC 2 Type 1 and Type 2 from May 2026.
Toronto, ON, October 6, 2026. VCA Software now holds Type 2 reports under both SOC standards. The claims management platform today announced it has completed its SOC 1 Type 1 and Type 2 examinations with Prescient Assurance, joining the SOC 2 Type 1 and Type 2 completed in May 2026. VCA has supported claims teams for over 20 years across the UK, US, Canada, and Australia, with clients across the Lloyd’s market, TPAs, MGAs and carriers.
The two SOC 1 reports, both completed in September 2026, work together. Type 1 confirmed that VCA’s controls over client financial data were suitably designed and in place. Type 2 goes a step further and confirms that those controls held up in day-to-day operation. Across the two standards, VCA has now completed four examinations with Prescient Assurance: SOC 2 Type 1 and Type 2, and SOC 1 Type 1 and Type 2.
“Our clients run claim payments and reserves through VCA, and those numbers end up in their financial statements and in front of their auditors,” said Ryan Waddell, CTO, VCA Software. “Our controls have always been there. What a SOC 1 Type 2 report adds is independent proof that they work, tested over time, in a form an auditor can take as evidence. Put that alongside our SOC 2 Type 2 and a client can answer their security team and their finance team with the same platform.”
SOC 1 and SOC 2 are attestation standards set by the American Institute of Certified Public Accountants (AICPA). Together they give independent verification of the two things VCA’s clients have relied on the platform for all along: the protection of their data and the integrity of their numbers. SOC 2 examines controls for security and confidentiality. SOC 1 examines the controls relevant to clients’ financial reporting, such as the claim payments and reserves processed through the platform. For claims organizations, that means one platform can answer both the security questionnaire and the external auditor’s request, whether they are TPAs reporting into several carriers, MGAs adding new capacity, or managing agents and coverholders under Lloyd’s delegated authority oversight.
“Claims teams are accountable for outcomes, compliance and the money that moves through a claim,” said Ilda Cairns, Chief Product Officer at VCA Software. “Type 1 told us our controls were designed properly. Type 2 shows they worked, day in and day out, across the whole review period. That’s the evidence our clients’ auditors and capacity providers actually ask for, and now we can hand it to them.”
With Type 2 reports under both standards, VCA backs its commitment to clients with independent evidence rather than assurances, across every market it serves.
VCA’s SOC 1 Type 2 and SOC 2 Type 2 reports are available under NDA upon request. The SOC 2 Type 2 announcement is available at vcasoftware.com/vca-software-soc-2-type-2-compliant.
About VCA Software
VCA Software is a claims management platform for carriers, MGAs, TPAs, independent adjusters, captives and self-insureds. VCA ClaimsCore runs the full claims lifecycle, from first notice of loss to settlement and compliance reporting, configures to how a program already runs, and implements in weeks, not years. Serving the Lloyd’s market for more than a decade and across the US, Canada, the UK and Australia. Software that works the way claims work.
Learn more at vcasoftware.com.
Media contact: John Varghese, johnv@vcasoftware.com, 416-706-2312