The SOC 2 report of the subservice organization should be reviewed annually to evaluate the effectiveness of the controls at that subservice organization so that third-party control assurance is periodically assessed.

The SOC 2 report of subservice organization should be reviewed on an annual basis

— Pyrana Information Security Policy.pdf

to evaluate the effectiveness of the controls

— Pyrana Information Security Policy.pdf

at the subservice organization

— Pyrana Information Security Policy.pdf