Case Study
TrueClaim: SOC 2 Type II for AI-powered insurance claims
InsurTech · SOC 2 Type II · AWS
TrueClaim automates vehicle damage appraisal with computer vision: photos go in, assessments come out, and insurance carriers build their claims workflows on top. That means carrier data flows through the platform end to end.
For enterprise insurance partners, that makes SOC 2 a precondition of the relationship, not a nice-to-have.
TrueClaim’s engineers are ML engineers. Every hour spent assembling audit evidence or drafting an incident response policy is an hour not spent on the models the business runs on. The company needed a Type II report that carriers would accept, without turning its product team into a part-time compliance department.
Cloudacio ran the readiness process across TrueClaim’s AWS and SageMaker stack: access controls and encryption along the entire inference pipeline, logging and monitoring shaped to how an AI workload actually behaves, policies that describe the real system, and an evidence repository mapped to controls.
Cloudacio coordinated the audit itself, prepped the team for interviews, and stayed through findings. The engineering team’s involvement stayed where it belongs: approving decisions, not chasing screenshots.
A clean SOC 2 Type II. Carrier security reviews move faster with the report in hand, and the product team kept shipping through the entire process.
"We handle carrier data, so SOC 2 was never optional for us. Cloudacio ran the whole process and our Type II came back clean, without pulling my engineers off product."Elie Lloyd, Founder at TrueClaim
The infrastructure under this report has its own story: TrueClaim’s AI platform on AWS.