ISAE 3402 Certification

ISAE 3402 certification is one of the most effective ways in which a service company lets know an interested third party the controls the organization has about information and services rendered.

There are two types of service audit than can be presented:

• Type I
• Type II.

While the Type I report describes the controls of the organization on a specific date, Type II not only includes the organization’s control description, but also includes detailed proof of the company’s controls endorsed by a third party, not part of the organization, which is validated on a yearly basis.

In this case, Payroll Plus MX is audited under the certification norm ISAE 34023 Type II.

SOC 1 Type II Report

The method used by the auditor was based on the AICPA normativity: “Statement on Standards for Attestation Engagements (SSAE 16)”. This methodology is for organizations that carry out external services that affect other companies’ financial statements.

Based on this, the report SOC 1 Type II is issued, which includes a general description of the controls and systems of the organization, a written statement by the administration and the certification of the auditor over the statement.