Audits

ONSET takes independent audits seriously because we ask our customers to trust us with their PDPA-regulated data, their LHDN submissions, and their AI-driven conversations. Current audit posture: · SOC 2 Type I — Engaged with Schellman & Co. Stage 1 scoping complete; Type I report targeted Q3 2026. · ISO 27001 — Gap assessment scheduled Q4 2026 with a Big 4 firm. · ISO 42001 — Pursuit underway; control mapping (/modules/ISO/dashboard) ≥70% implemented across 7 domains. Stage 1 audit Q3 2027. · PDPA — Annual self-assessment + ad-hoc GUARDIAN CRON daily compliance checks. NDPC registration filed. · LHDN ASP — Active. Submission audit trail kept 7 years per § 7 Income Tax Act. We publish summary letters (not the full reports — they contain customer-specific findings) under NDA on request. Email security@onset.my.