(Image credit: IIR/Gemini.)
YASSI (Santa Rosa, Calif.) has completed its latest SOC 2 Type II audit with zero exceptions.
The audit covered the period from April 1, 2025, through March 31, 2026, and was independently examined under standards established by the American Institute of Certified Public Accountants, according to a YASSI statement. The company says the review evaluated controls across infrastructure, access management, encryption, incident response and disaster recovery.
Bosco Yuen, CISO, YASSI.
YASSI provides real-time vehicle and title data infrastructure for the automotive, insurance and lending industries. The company says it has completed four consecutive SOC 2 Type II audits since March 2022, with the latest review producing zero exceptions.
YASSI says its security controls support access to sensitive vehicle record data, including driver’s license data, registration history, lien status and identity details protected under the Driver’s Privacy Protection Act.
“We touch some of the most sensitive data in the country, including people’s identities, their vehicle records, and their privacy,” comments Bosco Yuen, CISO, YASSI. “That obligation does not end when the audit does. SOC 2 Type II is the standard we hold ourselves to every single day, and our results prove it.”
YASSI operates as an AAMVA-approved NMVTIS Consumer Access Provider within a U.S. Department of Justice-sanctioned framework, according to the company. YASSI says it holds direct data agreements with state motor vehicle agencies in 46 states and provides source-direct title, registration, driving record and lien data, with NMVTIS data available through one unified API.
The company says organizations evaluating vehicle data providers should review current SOC 2 Type I and Type II reports, exception findings and prior audit documentation to assess vendors’ security controls and compliance practices.