Aderant Achieves SOC 2 Type 2 for Onyx

Key Takeaways

• Aderant's Onyx passed SOC 2 Type 2 audit.
• Audit covered security, availability, confidentiality controls.
• Review period: Nov 1 2025 – Jan 31 2026.
• Independent CPA firm Schellman performed the examination.
• Boosts law firms' confidence in Onyx reliability.

Summary

Aderant announced on March 30 that its outside‑counsel guideline platform, Onyx, successfully completed a SOC 2 Type 2 audit. The examination, conducted by Schellman & Company, assessed controls for security, availability, and confidentiality over the period Nov 1 2025 through Jan 31 2026. Achieving Type 2 status confirms both the design and operating effectiveness of Onyx’s control environment. The milestone follows earlier SOC 2 certifications for Aderant’s Sierra Expert, vi, and iTimeKeep solutions.

Pulse Analysis

SOC 2 Type 2 audits have become a benchmark for cloud‑based service providers, especially those handling sensitive legal data. The Trust Services Criteria—security, availability, and confidentiality—are scrutinized over an extended period, ensuring that controls are not only well‑designed but also consistently effective. For legal technology firms, this level of validation signals compliance with stringent data‑privacy regulations such as the ABA Model Rules and emerging state privacy statutes, helping clients mitigate exposure to breaches and operational downtime.

Aderant’s recent SOC 2 Type 2 achievement for Onyx builds on a broader security agenda that already includes SOC 2 certifications for Sierra Expert, vi, and iTimeKeep. By engaging Schellman & Company, a respected independent CPA firm, Aderant subjected its control framework to a thorough third‑party review. The audit examined everything from access management and encryption practices to incident‑response procedures, confirming that Onyx’s infrastructure can reliably support law firms’ demanding workloads. This systematic approach not only satisfies current client expectations but also positions Aderant to streamline future audits across its product suite.

For law firms, the certification translates into tangible business value. Clients increasingly demand proof that their technology partners can safeguard privileged information, and a SOC 2 Type 2 seal offers an objective, industry‑wide credential. It also differentiates Aderant in a crowded legal‑tech market, where security assurances can be a decisive factor in procurement decisions. As the sector moves toward greater digitization and remote collaboration, firms that demonstrate robust, auditable controls are likely to win more engagements and command premium pricing, reinforcing the strategic importance of continuous security investments.