LVM Systems Achieves Clean SOC 2 Type II Audit

LVM has completed a SOC 2 Type II examination covering its hosted software environment. The final report covers the 12-month period from June 1, 2025, through May 31, 2026, and addresses the Security, Availability, and Confidentiality Trust Services Criteria.

What is SOC 2 Type II?

SOC 2 is a framework developed by the American Institute of Certified Public Accountants for reporting on controls at service organizations. A Type II examination assesses whether controls were suitably designed and operated effectively over a defined period. This gives clients more information than a review conducted at a single point in time.

LVM worked with Thoropass on the examination.

What does this mean for our clients?

Healthcare organizations need to understand how their software vendors protect information and maintain reliable services. LVM’s SOC 2 Type II report gives current and prospective clients an independent assessment they can use in vendor reviews, procurement, and ongoing oversight. It provides information about the controls supporting the hosted environment covered by the report.

For LVM, the examination reinforces the practice of documenting, operating, and reviewing those controls over time. It also helps our team answer clients’ security and operational questions with evidence.

“Healthcare organizations depend on LVM for important daily workflows, and we take the responsibility of operating our software seriously.” said Jake Johnson, Chief Information Officer at LVM. “Completing this examination reflects sustained work across our team. It gives clients an independent report they can review and helps us keep improving how we operate.”

LVM helps healthcare teams manage workflows including nurse triage, patient access, transfer coordination, referral management, and care coordination.

Current and prospective clients can contact LVM to request access to the SOC 2 Type II report.